86 matches found
EUVD-2007-1029
Malware in sbrugna...
EUVD-2017-7150
Malware in sbrugna...
EUVD-2014-5933
Malware in sbrugna...
EUVD-2014-5935
Malware in sbrugna...
EUVD-2010-4524
Malware in sbrugna...
EUVD-2006-6896
Malware in sbrugna...
EUVD-2017-7158
Malware in sbrugna...
EUVD-2023-2574
Malicious code in bioql PyPI...
EUVD-2024-0983
Malicious code in bioql PyPI...
EUVD-2024-0847
Malicious code in bioql PyPI...
EUVD-2024-0558
Malicious code in bioql PyPI...
EUVD-2025-0051
Malicious code in bioql PyPI...
EUVD-2022-4682
Malicious code in bioql PyPI...
EUVD-2024-3486
Malicious code in bioql PyPI...
CVE-2024-29179
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. An attacker with admin privileges can upload an attachment containing JS code without extension and the application will render it as HTML which allows for XSS attacks...
CVE-2024-27300
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The email field in phpMyFAQ's user control panel page is vulnerable to stored XSS attacks due to the inadequacy of PHP's FILTERVALIDATEEMAIL function, which only validates the email format, not...
CVE-2024-24574
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Unsafe echo of filename in phpMyFAQ\phpmyfaq\admin\attachments.php leads to allowed execution of JavaScript code in client side XSS. This vulnerability has been patched in version 3.2.5...
CVE-2024-29196
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. There is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root. This vulnerability is fixed in 3.2.6...
CVE-2024-28108
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Due to insufficient validation on the contentLink parameter, it is possible for unauthenticated users to inject HTML code to the page which might affect other users. Also, requires that adding n...
CVE-2024-22208
phpMyFAQ is an Open Source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The 'sharing FAQ' functionality allows any unauthenticated actor to misuse the phpMyFAQ application to send arbitrary emails to a large range of targets. The phpMyFAQ application has a...