phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backslashes that are treated…
phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backslashes that are treated literally when MySQL or MariaDB runs in NO_BACKSLASH_ESCAPES mode. Unauthenticated attackers can send a Unicode right single quotation mark in the search parameter of api/autocomplete, which is normalized to an ASCII quote, to read credentials and configuration secrets, modify records, or drop tables.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Oracle
- Product
- MySQL, MariaDB
- CVSS
- 8.1
- EPSS
- 0.003 (p27)
- Exposure class
- Database
Why it ranks 21 (Routine)
- CVSS 8.1 high
- Product class: database
- Widely deployed vendor product (Oracle)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.