CVE Catalog
CVE-2017-15988
CriticalSummary
Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.
Recommendation
It is recommended to update the script to the latest version and to validate and sanitize input data to minimize the risk of attack.
Original NVD description (English source)
Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525.