SQL Injection Vulnerabilities in OTRS FAQ Package 2.x, 4.x, and 5.x

CVE-2016-5843 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:P/A:P

Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted search parameters.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.