Nicephpscripts Nice Php Faq Script — known CVE vulnerabilities

Every CVE whose affected-product data names Nicephpscripts Nice Php Faq Script, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2017-15988 — CVSS 9.8 (critical): Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525.
• CVE-2008-6525 — CVSS 7.5 (high): SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script (Knowledge base Script) allows remote attackers to execute arbitrary…