SQL Injection in Nicephpscripts Nice Php Faq Script

CVE-2008-6525

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to execute arbitrary SQL commands via the Password parameter (aka the pass field).

Vulnerability class: SQL Injection

EPSS: 0.020 (78.6th percentile) — read the EPSS interpretation.

Affected products

Nicephpscripts Nice_php_faq_script
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)