Beveiligingsadvies
CVE-2016-5843
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted search parameters.