Lucene search

[email protected]CVE-2009-4780

HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-4780

2022-10-0316:24:04

CWE-79

[email protected]

web.nvd.nist.gov

phpmyfaq

xss

vulnerability

web script

html

security

remote attack

cve-2009-4780

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in index.php in phpMyFAQ before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter in a sitemap action, (2) the search parameter in a search action, (3) the tagging_id parameter in a search action, (4) the highlight parameter in an artikel action, (5) the artlang parameter in an artikel action, (6) the letter parameter in a sitemap action, (7) the lang parameter in a show action, (8) the cat parameter in a show action, (9) the newslang parameter in a news action, (10) the artlang parameter in a send2friend action, (11) the cat parameter in a send2friend action, (12) the id parameter in a send2friend action, (13) the srclang parameter in a translate action, (14) the id parameter in a translate action, (15) the cat parameter in a translate action, (16) the cat parameter in an add action, or (17) the question parameter in an add action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD

Node

phpmyfaqphpmyfaqRange≤2.5.4

phpmyfaqphpmyfaqMatch0.60

phpmyfaqphpmyfaqMatch0.65

phpmyfaqphpmyfaqMatch0.70

phpmyfaqphpmyfaqMatch0.80

phpmyfaqphpmyfaqMatch0.80a

phpmyfaqphpmyfaqMatch0.85

phpmyfaqphpmyfaqMatch0.86

phpmyfaqphpmyfaqMatch0.87

phpmyfaqphpmyfaqMatch0.90

phpmyfaqphpmyfaqMatch0.95

phpmyfaqphpmyfaqMatch0.666

phpmyfaqphpmyfaqMatch1.0

phpmyfaqphpmyfaqMatch1.0.1

phpmyfaqphpmyfaqMatch1.0.1a

phpmyfaqphpmyfaqMatch1.1.0

phpmyfaqphpmyfaqMatch1.1.1

phpmyfaqphpmyfaqMatch1.1.2

phpmyfaqphpmyfaqMatch1.1.3

phpmyfaqphpmyfaqMatch1.1.4

phpmyfaqphpmyfaqMatch1.1.4a

phpmyfaqphpmyfaqMatch1.1.5

phpmyfaqphpmyfaqMatch1.2.0

phpmyfaqphpmyfaqMatch1.2.1

phpmyfaqphpmyfaqMatch1.2.2

phpmyfaqphpmyfaqMatch1.2.3

phpmyfaqphpmyfaqMatch1.2.4

phpmyfaqphpmyfaqMatch1.2.5

phpmyfaqphpmyfaqMatch1.2.5a

phpmyfaqphpmyfaqMatch1.2.5b

phpmyfaqphpmyfaqMatch1.3.0

phpmyfaqphpmyfaqMatch1.3.1

phpmyfaqphpmyfaqMatch1.3.2

phpmyfaqphpmyfaqMatch1.3.3

phpmyfaqphpmyfaqMatch1.3.4

phpmyfaqphpmyfaqMatch1.3.5

phpmyfaqphpmyfaqMatch1.3.6

phpmyfaqphpmyfaqMatch1.3.7

phpmyfaqphpmyfaqMatch1.3.8

phpmyfaqphpmyfaqMatch1.3.9

phpmyfaqphpmyfaqMatch1.3.9pl1

phpmyfaqphpmyfaqMatch1.3.10

phpmyfaqphpmyfaqMatch1.3.11

phpmyfaqphpmyfaqMatch1.3.12

phpmyfaqphpmyfaqMatch1.3.13

phpmyfaqphpmyfaqMatch1.3.14

phpmyfaqphpmyfaqMatch1.4

phpmyfaqphpmyfaqMatch1.4alpha1

phpmyfaqphpmyfaqMatch1.4alpha2

phpmyfaqphpmyfaqMatch1.4.0

phpmyfaqphpmyfaqMatch1.4.0a

phpmyfaqphpmyfaqMatch1.4.1

phpmyfaqphpmyfaqMatch1.4.2

phpmyfaqphpmyfaqMatch1.4.3

phpmyfaqphpmyfaqMatch1.4.4

phpmyfaqphpmyfaqMatch1.4.5

phpmyfaqphpmyfaqMatch1.4.6

phpmyfaqphpmyfaqMatch1.4.7

phpmyfaqphpmyfaqMatch1.4.8

phpmyfaqphpmyfaqMatch1.4.9

phpmyfaqphpmyfaqMatch1.4.10

phpmyfaqphpmyfaqMatch1.4.11

phpmyfaqphpmyfaqMatch1.4a

phpmyfaqphpmyfaqMatch1.5

phpmyfaqphpmyfaqMatch1.5alpha1

phpmyfaqphpmyfaqMatch1.5alpha2

phpmyfaqphpmyfaqMatch1.5beta1

phpmyfaqphpmyfaqMatch1.5beta2

phpmyfaqphpmyfaqMatch1.5beta3

phpmyfaqphpmyfaqMatch1.5rc1

phpmyfaqphpmyfaqMatch1.5rc2

phpmyfaqphpmyfaqMatch1.5rc3

phpmyfaqphpmyfaqMatch1.5rc4

phpmyfaqphpmyfaqMatch1.5rc5

phpmyfaqphpmyfaqMatch1.5.0

phpmyfaqphpmyfaqMatch1.5.1

phpmyfaqphpmyfaqMatch1.5.2

phpmyfaqphpmyfaqMatch1.5.3

phpmyfaqphpmyfaqMatch1.5.4

phpmyfaqphpmyfaqMatch1.5.5

phpmyfaqphpmyfaqMatch1.5.6

phpmyfaqphpmyfaqMatch1.5.7

phpmyfaqphpmyfaqMatch1.5.8

phpmyfaqphpmyfaqMatch1.5.9

phpmyfaqphpmyfaqMatch1.6.0

phpmyfaqphpmyfaqMatch1.6.1

phpmyfaqphpmyfaqMatch1.6.2

phpmyfaqphpmyfaqMatch1.6.3

phpmyfaqphpmyfaqMatch1.6.4

phpmyfaqphpmyfaqMatch1.6.5

phpmyfaqphpmyfaqMatch1.6.6

phpmyfaqphpmyfaqMatch1.6.7

phpmyfaqphpmyfaqMatch1.6.8

phpmyfaqphpmyfaqMatch1.6.9

phpmyfaqphpmyfaqMatch1.6.10

phpmyfaqphpmyfaqMatch1.6.11

phpmyfaqphpmyfaqMatch1.6.12

phpmyfaqphpmyfaqMatch2.0.0

phpmyfaqphpmyfaqMatch2.0.1

phpmyfaqphpmyfaqMatch2.0.2

phpmyfaqphpmyfaqMatch2.0.3

phpmyfaqphpmyfaqMatch2.0.4

phpmyfaqphpmyfaqMatch2.0.5

phpmyfaqphpmyfaqMatch2.0.6

phpmyfaqphpmyfaqMatch2.0.7

phpmyfaqphpmyfaqMatch2.0.8

phpmyfaqphpmyfaqMatch2.0.9

phpmyfaqphpmyfaqMatch2.0.10

phpmyfaqphpmyfaqMatch2.0.11

phpmyfaqphpmyfaqMatch2.0.12

phpmyfaqphpmyfaqMatch2.0.13

phpmyfaqphpmyfaqMatch2.0.14

phpmyfaqphpmyfaqMatch2.0.15

phpmyfaqphpmyfaqMatch2.0.16

phpmyfaqphpmyfaqMatch2.0.17

phpmyfaqphpmyfaqMatch2.5.0

phpmyfaqphpmyfaqMatch2.5.1

phpmyfaqphpmyfaqMatch2.5.2

phpmyfaqphpmyfaqMatch2.5.3

CPENameOperatorVersion
phpmyfaq:phpmyfaqphpmyfaqle2.5.4
phpmyfaq:phpmyfaqphpmyfaqeq0.60
phpmyfaq:phpmyfaqphpmyfaqeq0.65
phpmyfaq:phpmyfaqphpmyfaqeq0.70
phpmyfaq:phpmyfaqphpmyfaqeq0.80
phpmyfaq:phpmyfaqphpmyfaqeq0.80a
phpmyfaq:phpmyfaqphpmyfaqeq0.85
phpmyfaq:phpmyfaqphpmyfaqeq0.86
phpmyfaq:phpmyfaqphpmyfaqeq0.87
phpmyfaq:phpmyfaqphpmyfaqeq0.90

CPE	Name	Operator	Version
phpmyfaq:phpmyfaq	phpmyfaq	le	2.5.4
phpmyfaq:phpmyfaq	phpmyfaq	eq	0.60
phpmyfaq:phpmyfaq	phpmyfaq	eq	0.65
phpmyfaq:phpmyfaq	phpmyfaq	eq	0.70
phpmyfaq:phpmyfaq	phpmyfaq	eq	0.80
phpmyfaq:phpmyfaq	phpmyfaq	eq	0.80a
phpmyfaq:phpmyfaq	phpmyfaq	eq	0.85
phpmyfaq:phpmyfaq	phpmyfaq	eq	0.86
phpmyfaq:phpmyfaq	phpmyfaq	eq	0.87
phpmyfaq:phpmyfaq	phpmyfaq	eq	0.90

Rows per page:

1-10 of 1061

References

secunia.com/advisories/37520

www.securityfocus.com/bid/37180

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

Related for CVE-2009-4780

prion1 openvas2 cvelist1 nvd1