CVE-2016-5843

Fixed in a distro release EPSS 3%

Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted search parameters.

Published 2016-09-17 · CVE record · OSV

Products: otrs faq

Distro releases