CVE-2016-5843

Critical

Published: 17/09/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Multiple SQL injection vulnerabilities in the FAQ package in versions 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted search parameters.

Risk Assessment

Attackers can exploit these vulnerabilities to gain access to sensitive data in the database, potentially leading to serious security breaches for the organization.

Recommendation

It is recommended to update the FAQ package to the latest version to eliminate these vulnerabilities and conduct a security audit of the system.

Original NVD description (English source)

Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted search parameters.