WS-2022-0427

thorsten/phpmyfaq prior to 3.1.9 is vulnerable to SQL injection via the lang parameter of phpmyfaq/ajaxservice.php?action=savefaq endpoint. It is able to bypass faqLanguage whitelisting by specifying a rubrik POST parameter. The impact depends on the database engine used. For MySQL database engin...