SQL Injection Vulnerabilities in OTRS FAQ Package 2.x, 4.x, and 5.x

CVE-2016-5843

Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted search parameters.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.