CVE-2017-15988

CVE-2017-15988 concerns the Nice PHP FAQ Script , where an unsafe handling of the GET parameter nice_theme in index.php leads to SQL injection. The root cause is lack of input sanitization/parameterization, enabling an attacker to inject SQL commands via the nice_theme parameter. Impact per sourc...

CVE-2008-6525

The CVE CVE-2008-6525 affects the Nice PHP FAQ Script Admin Panel and is caused by an SQL injection in the Password field (pass). Remote attackers can execute arbitrary SQL commands through this input vector. Exploitation is supported by external references (e.g., Exploit-DB). No remediation deta...