NetSight
critical9.8Public exploit code

CVE-2017-15988

Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525.

Affected products

VendorProductAffected versions
NicephpscriptsNice Php Faq Script
All versions

Weakness classification

References