Lucene search

[email protected]CVE-2016-5843

HistorySep 17, 2016 - 2:59 a.m.

CVE-2016-5843

2016-09-1702:59:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2016-5843

sql injection

faq package

otrs

vulnerability

remote attack

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:C/I:P/A:P

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

9.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.1%

JSON

Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted search parameters.

Affected configurations

NVD

Node

otrsfaqMatch2.0.1

otrsfaqMatch2.0.2

otrsfaqMatch2.0.3

otrsfaqMatch2.0.4

otrsfaqMatch2.0.5

otrsfaqMatch2.0.6

otrsfaqMatch2.0.7

otrsfaqMatch2.0.8

otrsfaqMatch2.1.0

otrsfaqMatch2.1.1

otrsfaqMatch2.1.2

otrsfaqMatch2.1.3

otrsfaqMatch2.1.4

otrsfaqMatch2.2.0

otrsfaqMatch2.2.1

otrsfaqMatch2.2.2

otrsfaqMatch2.2.3

otrsfaqMatch2.3.0

otrsfaqMatch2.3.1

otrsfaqMatch2.3.2

otrsfaqMatch2.3.3

otrsfaqMatch2.3.4

otrsfaqMatch4.0.0

otrsfaqMatch4.0.1

otrsfaqMatch4.0.2

otrsfaqMatch4.0.3

otrsfaqMatch5.0.0

otrsfaqMatch5.0.1

otrsfaqMatch5.0.2

otrsfaqMatch5.0.3

CPENameOperatorVersion
otrs:faqotrs faqeq2.0.1
otrs:faqotrs faqeq2.0.2
otrs:faqotrs faqeq2.0.3
otrs:faqotrs faqeq2.0.4
otrs:faqotrs faqeq2.0.5
otrs:faqotrs faqeq2.0.6
otrs:faqotrs faqeq2.0.7
otrs:faqotrs faqeq2.0.8
otrs:faqotrs faqeq2.1.0
otrs:faqotrs faqeq2.1.1

CPE	Name	Operator	Version
otrs:faq	otrs faq	eq	2.0.1
otrs:faq	otrs faq	eq	2.0.2
otrs:faq	otrs faq	eq	2.0.3
otrs:faq	otrs faq	eq	2.0.4
otrs:faq	otrs faq	eq	2.0.5
otrs:faq	otrs faq	eq	2.0.6
otrs:faq	otrs faq	eq	2.0.7
otrs:faq	otrs faq	eq	2.0.8
otrs:faq	otrs faq	eq	2.1.0
otrs:faq	otrs faq	eq	2.1.1

Rows per page:

1-10 of 301

References

www.securityfocus.com/bid/93019

github.com/OTRS/FAQ/commit/3700f75c67f6ed1d39bc213445c6d12a458e1af9

github.com/OTRS/FAQ/commit/8c9d63bd0297adda760330805c31afc130861557

github.com/OTRS/FAQ/commit/b805703e7b7725d1f3040bb626a4c4dd845ee9e3

www.otrs.com/security-advisory-2016-01-security-update-otrs-faq-package/

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:C/I:P/A:P

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

9.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.1%

JSON

Related for CVE-2016-5843

alpinelinux1 prion1 nvd1 openvas1 ubuntucve1 cvelist1