{"id":"CVE-2016-5843","state":"PUBLISHED","title":"Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to ex","description":"Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted search parameters.","publishedAt":"2016-09-17T01:00:00.000Z","updatedAt":"2024-08-06T01:15:10.790Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://www.otrs.com/security-advisory-2016-01-security-update-otrs-faq-package/","http://www.securityfocus.com/bid/93019","https://github.com/OTRS/FAQ/commit/b805703e7b7725d1f3040bb626a4c4dd845ee9e3","https://github.com/OTRS/FAQ/commit/8c9d63bd0297adda760330805c31afc130861557","https://github.com/OTRS/FAQ/commit/3700f75c67f6ed1d39bc213445c6d12a458e1af9"],"weaknesses":[],"ingestedAt":"2026-10-29T19:42:47.553Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2016/5xxx/CVE-2016-5843.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2016-5843","state":"PUBLISHED","datePublished":"2016-09-17T01:00:00.000Z","dateUpdated":"2024-08-06T01:15:10.790Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2016-06-23T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted search parameters."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://www.otrs.com/security-advisory-2016-01-security-update-otrs-faq-package/","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/93019","name":"93019","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://github.com/OTRS/FAQ/commit/b805703e7b7725d1f3040bb626a4c4dd845ee9e3","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/OTRS/FAQ/commit/8c9d63bd0297adda760330805c31afc130861557","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/OTRS/FAQ/commit/3700f75c67f6ed1d39bc213445c6d12a458e1af9","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2016-11-25T19:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2016-06-25T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2016-5843","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted search parameters."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://www.otrs.com/security-advisory-2016-01-security-update-otrs-faq-package/","refsource":"CONFIRM","url":"https://www.otrs.com/security-advisory-2016-01-security-update-otrs-faq-package/"},{"name":"93019","refsource":"BID","url":"http://www.securityfocus.com/bid/93019"},{"name":"https://github.com/OTRS/FAQ/commit/b805703e7b7725d1f3040bb626a4c4dd845ee9e3","refsource":"CONFIRM","url":"https://github.com/OTRS/FAQ/commit/b805703e7b7725d1f3040bb626a4c4dd845ee9e3"},{"name":"https://github.com/OTRS/FAQ/commit/8c9d63bd0297adda760330805c31afc130861557","refsource":"CONFIRM","url":"https://github.com/OTRS/FAQ/commit/8c9d63bd0297adda760330805c31afc130861557"},{"name":"https://github.com/OTRS/FAQ/commit/3700f75c67f6ed1d39bc213445c6d12a458e1af9","refsource":"CONFIRM","url":"https://github.com/OTRS/FAQ/commit/3700f75c67f6ed1d39bc213445c6d12a458e1af9"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.otrs.com/security-advisory-2016-01-security-update-otrs-faq-package/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/93019","name":"93019","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://github.com/OTRS/FAQ/commit/b805703e7b7725d1f3040bb626a4c4dd845ee9e3","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://github.com/OTRS/FAQ/commit/8c9d63bd0297adda760330805c31afc130861557","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://github.com/OTRS/FAQ/commit/3700f75c67f6ed1d39bc213445c6d12a458e1af9","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T01:15:10.790Z"}}]}}}