Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline

Phpmyfaq Security Vulnerabilities

cve
cve

CVE-2024-29196

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. There is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root. This vulnerability is fixed in...

3.8CVSS

7.1AI Score

0.0004EPSS

2024-03-26 03:15 AM
28
cve
cve

CVE-2024-29179

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. An attacker with admin privileges can upload an attachment containing JS code without extension and the application will render it as HTML which allows for XSS...

4.3CVSS

6.5AI Score

0.0004EPSS

2024-03-25 09:15 PM
26
cve
cve

CVE-2024-28106

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. By manipulating the news parameter in a POST request, an attacker can inject malicious JavaScript code. Upon browsing to the compromised news page, the XSS payload triggers. This vulnerability is....

4.3CVSS

6.3AI Score

0.0004EPSS

2024-03-25 07:15 PM
28
cve
cve

CVE-2024-28105

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The category image upload function in phpmyfaq is vulnerable to manipulation of the Content-type and lang parameters, allowing attackers to upload malicious files with a .php extension,...

7.2CVSS

8.4AI Score

0.0004EPSS

2024-03-25 07:15 PM
27
cve
cve

CVE-2024-28107

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. A SQL injection vulnerability has been discovered in the insertentry & saveentry when modifying records due to improper escaping of the email address. This allows any authenticated user with the.....

8.8CVSS

8.2AI Score

0.0004EPSS

2024-03-25 07:15 PM
24
cve
cve

CVE-2024-28108

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Due to insufficient validation on the contentLink parameter, it is possible for unauthenticated users to inject HTML code to the page which might affect other users. Also, requires that adding...

4.7CVSS

7.3AI Score

0.0004EPSS

2024-03-25 07:15 PM
27
cve
cve

CVE-2024-27299

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. A SQL injection vulnerability has been discovered in the the "Add News" functionality due to improper escaping of the email address. This allows any authenticated user with the rights to add/edit....

8.8CVSS

8.1AI Score

0.0004EPSS

2024-03-25 07:15 PM
32
cve
cve

CVE-2024-27300

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The email field in phpMyFAQ's user control panel page is vulnerable to stored XSS attacks due to the inadequacy of PHP's FILTER_VALIDATE_EMAIL function, which only validates the email format, not....

5.5CVSS

6.7AI Score

0.0004EPSS

2024-03-25 07:15 PM
29
cve
cve

CVE-2024-24574

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Unsafe echo of filename in phpMyFAQ\phpmyfaq\admin\attachments.php leads to allowed execution of JavaScript code in client side (XSS). This vulnerability has been patched in version...

6.1CVSS

7.4AI Score

0.001EPSS

2024-02-05 09:15 PM
13
cve
cve

CVE-2024-22208

phpMyFAQ is an Open Source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The 'sharing FAQ' functionality allows any unauthenticated actor to misuse the phpMyFAQ application to send arbitrary emails to a large range of targets. The phpMyFAQ application has a...

6.5CVSS

7.4AI Score

0.0005EPSS

2024-02-05 09:15 PM
16
cve
cve

CVE-2024-22202

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. phpMyFAQ's user removal page allows an attacker to spoof another user's detail, and in turn make a compelling phishing case for removing another user's account. The front-end of this page doesn't....

6.5CVSS

7.1AI Score

0.0005EPSS

2024-02-05 08:15 PM
16
cve
cve

CVE-2023-6889

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

5.4CVSS

5.3AI Score

0.0004EPSS

2023-12-16 09:15 AM
15
cve
cve

CVE-2023-6890

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

5.4CVSS

5.3AI Score

0.0004EPSS

2023-12-16 09:15 AM
18
cve
cve

CVE-2023-5867

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

4.6CVSS

6AI Score

0.0004EPSS

2023-10-31 01:15 AM
18
cve
cve

CVE-2023-5863

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to...

7.4CVSS

6.3AI Score

0.0005EPSS

2023-10-31 01:15 AM
17
cve
cve

CVE-2023-5865

Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to...

7.6CVSS

7AI Score

0.001EPSS

2023-10-31 01:15 AM
16
cve
cve

CVE-2023-5864

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

7.4CVSS

6.2AI Score

0.0004EPSS

2023-10-31 01:15 AM
35
cve
cve

CVE-2023-5866

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to...

6.3CVSS

7AI Score

0.0005EPSS

2023-10-31 01:15 AM
13
cve
cve

CVE-2023-5227

Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to...

6.5CVSS

9.5AI Score

0.001EPSS

2023-09-30 01:15 AM
33
cve
cve

CVE-2023-5317

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

6.3CVSS

5.3AI Score

0.0004EPSS

2023-09-30 01:15 AM
27
cve
cve

CVE-2023-5319

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

8.3CVSS

5.3AI Score

0.0004EPSS

2023-09-30 01:15 AM
71
cve
cve

CVE-2023-5320

Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to...

9CVSS

6.1AI Score

0.0005EPSS

2023-09-30 01:15 AM
70
cve
cve

CVE-2023-5316

Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to...

9.1CVSS

6.1AI Score

0.0005EPSS

2023-09-30 01:15 AM
71
cve
cve

CVE-2023-4007

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

8.8CVSS

5.3AI Score

0.0004EPSS

2023-07-31 01:15 AM
93
cve
cve

CVE-2023-4006

Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to...

8.8CVSS

9.4AI Score

0.001EPSS

2023-07-31 01:15 AM
93
cve
cve

CVE-2023-3469

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to...

5.2CVSS

5.2AI Score

0.0004EPSS

2023-06-30 01:15 AM
7
cve
cve

CVE-2023-2998

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

6CVSS

6AI Score

0.001EPSS

2023-05-31 01:15 AM
77
cve
cve

CVE-2023-2999

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

6.7CVSS

6AI Score

0.001EPSS

2023-05-31 01:15 AM
75
cve
cve

CVE-2023-2753

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

7.2CVSS

5.3AI Score

0.001EPSS

2023-05-17 08:15 AM
19
cve
cve

CVE-2023-2752

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

7.2CVSS

5.3AI Score

0.001EPSS

2023-05-17 08:15 AM
78
cve
cve

CVE-2023-2550

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

8.2CVSS

4.9AI Score

0.001EPSS

2023-05-05 08:15 PM
104
cve
cve

CVE-2023-2427

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to...

6.1CVSS

5AI Score

0.001EPSS

2023-05-05 07:15 PM
118
cve
cve

CVE-2023-2429

Improper Access Control in GitHub repository thorsten/phpmyfaq prior to...

6.6CVSS

9.5AI Score

0.002EPSS

2023-04-30 03:15 AM
22
cve
cve

CVE-2023-2428

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

6.1CVSS

5.3AI Score

0.001EPSS

2023-04-30 01:15 AM
21
cve
cve

CVE-2023-1875

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

5.4CVSS

5.3AI Score

0.001EPSS

2023-04-22 06:15 PM
13
cve
cve

CVE-2023-1884

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to...

4.7CVSS

6.1AI Score

0.001EPSS

2023-04-05 05:15 PM
14
cve
cve

CVE-2023-1887

Business Logic Errors in GitHub repository thorsten/phpmyfaq prior to...

8.3CVSS

4.6AI Score

0.001EPSS

2023-04-05 05:15 PM
18
cve
cve

CVE-2023-1879

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

4.7CVSS

5.3AI Score

0.001EPSS

2023-04-05 05:15 PM
17
cve
cve

CVE-2023-1880

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to...

8.3CVSS

6.1AI Score

0.001EPSS

2023-04-05 05:15 PM
37
cve
cve

CVE-2023-1878

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

8.3CVSS

5.3AI Score

0.001EPSS

2023-04-05 05:15 PM
18
cve
cve

CVE-2023-1883

Improper Access Control in GitHub repository thorsten/phpmyfaq prior to...

5.4CVSS

5.5AI Score

0.001EPSS

2023-04-05 05:15 PM
19
cve
cve

CVE-2023-1885

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

5.4CVSS

5.3AI Score

0.001EPSS

2023-04-05 05:15 PM
13
cve
cve

CVE-2023-1882

Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to...

8.1CVSS

5.3AI Score

0.001EPSS

2023-04-05 05:15 PM
19
cve
cve

CVE-2023-1886

Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to...

9.8CVSS

9.5AI Score

0.002EPSS

2023-04-05 05:15 PM
20
cve
cve

CVE-2023-1757

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

8.1CVSS

5.3AI Score

0.001EPSS

2023-04-05 04:15 PM
10
cve
cve

CVE-2023-1758

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository thorsten/phpmyfaq prior to...

8.9CVSS

5.4AI Score

0.001EPSS

2023-04-05 04:15 PM
12
cve
cve

CVE-2023-1756

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

5.4CVSS

5.3AI Score

0.001EPSS

2023-04-05 04:15 PM
17
cve
cve

CVE-2023-1761

Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to...

5.4CVSS

5.4AI Score

0.001EPSS

2023-03-31 02:15 AM
37
cve
cve

CVE-2023-1760

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

8.1CVSS

4.9AI Score

0.001EPSS

2023-03-31 02:15 AM
21
cve
cve

CVE-2023-1762

Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to...

7.2CVSS

8.8AI Score

0.001EPSS

2023-03-31 02:15 AM
46
Total number of security vulnerabilities123