Vulners
Lucene search
PHPMyFAQ 2.9.8 - Cross-Site Scripting (1)
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | PHPMyFAQ 2.9.8 - Cross-Site Scripting Vulnerability | 21 Sep 201700:00 | – | zdt |
 | CVE-2017-14618 | 20 Sep 201721:00 | – | cve |
 | CVE-2017-14618 | 20 Sep 201721:00 | – | cvelist |
 | EUVD-2017-6119 | 7 Oct 202500:30 | – | euvd |
 | PHPMyFAQ 2.9.8 - Cross-Site Scripting (1) | 21 Sep 201700:00 | – | exploitpack |
 | FreeBSD : phpmyfaq -- multiple issues (33888815-631e-4bba-b776-a9b46fe177b5) | 2 Oct 201700:00 | – | nessus |
 | CVE-2017-14618 | 20 Sep 201721:29 | – | nvd |
 | phpMyFAQ < 2.9.9 Multiple XSS And CSRF Vulnerabilities | 21 Sep 201700:00 | – | openvas |
 | phpMyFAQ 2.9.8 Cross Site Scripting | 21 Sep 201700:00 | – | packetstorm |
 | Cross site scripting | 20 Sep 201721:29 | – | prion |
10
# Exploit Title: phpMyFAQ 2.9.8 Stored XSS
# Vendor Homepage: http://www.phpmyfaq.de/
# Software Link: http://download.phpmyfaq.de/phpMyFAQ-2.9.8.zip
# Exploit Author: Ishaq Mohammed
# Contact: https://twitter.com/security_prince
# Website: https://about.me/security-prince
# Category: webapps
# CVE: CVE-2017-14618
1. Description
Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ
through 2.9.8 allows remote attackers to inject arbitrary web script or
HTML via the Questions field in an "Add New FAQ" action.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14618
https://securityprince.blogspot.fr/2017/10/cve-2017-14618-phpmyfaq-298-cross-site.html
2. Proof of Concept
Steps to Reproduce:
1. Open the affected link "
http://localhost/phpmyfaq/admin/?action=editentry" with logged in user
with administrator privileges
2. Enter the <a onmouseover=alert(document.cookie)>xss link</a> in the
“Questions”
3. Save the FAQ
4. Login using any other user or simply click on the phpMyFAQ on the
top-right hand side of the web portal
5. Click on the latest FAQ added
6. Hover around the name "xss link"
3. Solution:
This vulnerability will be fixed in phpMyFAQ 2.9.9Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Sep 2017 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 23.5
CVSS 34.8
EPSS0.00552