Lucene search

K

Veracode Vulnerability DatabaseVERACODE:7375

HistoryAug 29, 2018 - 4:17 a.m.

SQL Injection

2018-08-2904:17:25

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

8

EPSS

0.001

Percentile

44.5%

phpMyFAQ/phpMyFAQ is vulnerable to SQL Injections. The library does not properly escape parameters in the SQL query executed by the restore function, allowing malicious users to inject and execute arbitrary SQL queries.

References

github.com/thorsten/phpMyFAQ/commit/268cabeb5f62ab950b790f1440da7c6e22c336c7

www.phpmyfaq.de/security/advisory-2014-09-16

EPSS

0.001

Percentile

44.5%

Related for VERACODE:7375

cvelist1 prion1 nvd1 cve1 exploitdb1