CVE-2018-19457

CVE-2018-19457 affects Logicspice FAQ Script 2.9.7, where an attacker can upload arbitrary files to admin/faqs/faqimages and achieve remote command execution via a crafted .php file. Public references (e.g., Exploit-DB) indicate exploit availability. NVD metrics show CVSSv2 6.5 (MEDIUM) and CVSSv...

Updated libxml2 packages fix security vulnerability

Integer overflow in memory debug code in libxml2 before 2.9.5 CVE-2017-5130. It was discovered that libxml2 incorrecty handled certain files. An attacker could use this issue with specially constructed XML data to cause libxml2 to consume resources, leading to a denial of service CVE-2017-15412...

CVE-2017-7579

inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field...