phpmyfaq -- arbitrary PHP code execution vulnerability

The phpMyFAQ team reports: Secunia noticed while analysing the advisory that authenticated users with "Right to add attachments" are able to exploit an already publicly known issue in the bundled Ajax File Manager of phpMyFAQ version 2.8.3, which leads to arbitrary PHP code execution for...

CVE-2010-4821

Cross-site scripting XSS vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

CVE-2010-4821

Summary (CVE-2010-4821) A cross-site scripting (XSS) vulnerability affects phpMyFAQ prior to 2.6.9. The issue allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php. The root cause is improper handling of PATH_INFO in the index entry point, leading to script...

CVE-2010-4821

Cross-site scripting XSS vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php...

FreeBSD Ports: phpmyfaq

The remote host is missing an update to the system as announced in the referenced advisory. VID c80a3d93-8632-11e1-a374-14dae9ebcf89 OpenVAS Vulnerability Test $ Description: Auto generated from VID c80a3d93-8632-11e1-a374-14dae9ebcf89 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: phpmyfaq

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

phpMyFAQ 2.7.0 RCE

Remote command execution vulnerability in phpMyFAQ ajaxcreatefolder.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

FreeBSD : phpmyfaq -- Remote PHP Code Execution Vulnerability (c80a3d93-8632-11e1-a374-14dae9ebcf89)

The phpMyFAQ project reports : The bundled ImageManager library allows injection of arbitrary PHP code to execute arbitrary PHP code and upload malware and trojan horses. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

phpmyfaq -- Remote PHP Code Execution Vulnerability

The phpMyFAQ project reports: The bundled ImageManager library allows injection of arbitrary PHP code to execute arbitrary PHP code and upload malware and trojan horses...

FreeBSD Ports: phpmyfaq

The remote host is missing an update to the system as announced in the referenced advisory. VID 395e0faa-ffa7-11e0-8ac4-6c626dd55a41 OpenVAS Vulnerability Test $ Description: Auto generated from VID 395e0faa-ffa7-11e0-8ac4-6c626dd55a41 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: phpmyfaq

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-4825

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted...

Code injection

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted...

CVE-2011-4825

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted...

CVE-2011-4825

CVE-2011-4825 describes a static code injection vulnerability in the file inc/function.base.php of the Ajax File and Image Manager (used in various products). The flaw allows remote attackers to inject arbitrary PHP code into the file data.php via crafted parameters. Affected versions include Aja...

phpMyFAQ 2.7.0 Code Execution

?php / ------------------------------------------------------------------------ phpMyFAQ = 2.7.0 ajaxcreatefolder.php Remote Code Execution Exploit ------------------------------------------------------------------------ author............: Egidio Romano aka EgiX mail..............:...

PHPMyFAQ 2.7.0 - ajax_create_folder.php Remote Code Execution

PHPMyFAQ 2.7.0 - ajaxcreatefolder.php Remote Code Execution ?php / ------------------------------------------------------------------------ phpMyFAQ = 2.7.0 ajaxcreatefolder.php Remote Code Execution Exploit ------------------------------------------------------------------------...

PHPMyFAQ 2.7.0 - 'ajax_create_folder.php' Remote Code Execution

?php / ------------------------------------------------------------------------ phpMyFAQ = 2.7.0 ajaxcreatefolder.php Remote Code Execution Exploit ------------------------------------------------------------------------ author............: Egidio Romano aka EgiX mail..............:...

phpMyFAQ <= 2.7.0 (ajax_create_folder.php) Remote Code Execution

Exploit for php platform in category web applications ?php / ------------------------------------------------------------------------ phpMyFAQ = 2.7.0 ajaxcreatefolder.php Remote Code Execution Exploit ------------------------------------------------------------------------ author............:...