Nicephpscripts

CVE-2017-15988 Oct 31, 07:29 CRITICAL POC Act Now

Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2017-15964 Oct 29, 06:29 CRITICAL POC Act Now

Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.