WS-2022-0425

thorsten/phpmyfaq prior to 3.1.9 is vulnerable to SQL Injection inside category creation checkIfCategoryExists. A user with the permission to add a category can dump the whole database. It can use the data retrieved to get an administrator account. An attacker could also use mathematical function...