FAQ System 1.1 Multiple SQL Security Vulnerabilities
Description
FAQ System is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
Confirmed in version 1.1. Other versions may also be affected.
Impact
The remote attacker can manipulate SQL queries by injecting arbitrary SQL code.
References
FAQ System Multiple SQL Injection Vulnerabilities
Product Homepage
|