CVE-2016-5843: Otrs Faq

Critical severity, CVSS 9.4. EPSS: 3.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted search parameters.

Affected products

• Otrs Faq: version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; version 2.0.6 only; …

Published 2016-09-17. Last modified 2026-06-17.