9.8
CVSSv3

CVE-2017-15988

Published: 31/10/2017 Updated: 18/11/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525.

Vulnerable Product Search on Vulmon Subscribe to Product

nicephpscripts nice php faq script -

Exploits

# # # # # # Exploit Title: Nice PHP FAQ Script - SQL Injection # Dork: N/A # Date: 30102017 # Vendor Homepage: wwwnicephpscriptscom/ # Software wwwnicephpscriptscom/demo_php_script-PHP-FAQ-Script-Knowledgebase-Scripthtm # Demo: wwwnicephpscriptscom/scripts/faqscript/ # Version: N/A # Category: Webapps # Tested on: WiN ...
Nice PHP FAQ Script suffers from a remote SQL injection vulnerability ...