1866 matches found
CVE-2017-14619
Cross-site scripting XSS vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module...
Cross site scripting
Cross-site scripting XSS vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action...
CVE-2017-14618
Cross-site scripting XSS vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action...
CVE-2017-14618
Cross-site scripting XSS vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action...
CVE-2017-14619
CVE-2017-14619 affects phpMyFAQ <= 2.9.8. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary script/HTML via the "Title of your FAQ" field in the Configuration Module. Multiple connected sources corroborate a stored/reflected-like XSS path i...
CVE-2017-14619
Cross-site scripting XSS vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module...
CVE-2017-14618
CVE-2017-14618 is a documented XSS vulnerability in phpMyFAQ up to version 2.9.8. The flaw resides in inc/PMF/Faq.php, allowing an attacker to inject arbitrary web script or HTML via the Questions field in an Add New FAQ action. Public references (Exploit-DB and packetstorm) confirm a stored XSS ...
phpmyfaq -- multiple issues
phpmyfaq developers report: Cross-site scripting XSS vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action. Cross-site scripting XSS vulnerability in phpMyFAQ through 2.9.8 allow...
Cross-site Request Forgery (CSRF)
phpMyFAQ is vulnerable to cross-site request forgery CSRF. The library does not properly escape certain strings, allowing a malicious website to change a user's settings...
Brute Force Attacks
phpMyFAQ is vulnerable to brute force attacks. The library does not lockout an account after too many failed attempts, allowing a malicious user to brute force a password to an account...
phpMyFAQ Improper Restriction Vulnerability
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A security vulnerability exists in versions of...
Design/Logic Flaw
phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly...
CVE-2017-11187
phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly...
CVE-2017-11187
phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly...
CVE-2017-11187
The CVE concerns phpMyFAQ prior to version 2.9.8, where login brute-force protection is insufficient—allowing rapid, repeated invalid authentication attempts. The issue is tied to failure to mitigate brute-force attacks. Remediation evidenced across sources suggests upgrading to version 2.9.8 or ...
CVE-2017-11187
phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly...
Cross-site Scripting (XSS)
phpMyFAQ is vulnerable to cross-site scripting XSS attacks. Its does not properly sanitize the user supplied input, allowing the attackers to introduce malicious web script or HTML through it...
Cross-site Scripting (XSS)
phpmyFAQ is vulnerable to cross-site scripting XSS attacks. These attacks are possible through the question field in inc/PMF/Faq.php...
phpMyFAQ inc/PMF/Faq.php file cross-site scripting vulnerability
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site scripting vulnerability exists in th...