Fwd: 2.6.6 <= phpMyFAQ <= 2.6.8 XSS

Hi, My name is Yam Mesicka, I'm from Israel and this is my first big disclosure so help needed is here :- I found XSS on phpMyFAQ system, versions 2.6.6 to 2.6.8. Dork: intitle:"Powered By phpMyFAQ 2.6.8" XSS: site-location/index.php/"scriptalert"XSS"/script Vul: 2.6.6 = phpMyFAQ = 2.6.8 The...

PHPMyFAQ 2.6.x - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43560/info phpMyFAQ is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

phpmyfaq -- cross site scripting vulnerabilities

The phpMyFAQ project reports: The phpMyFAQ Team has learned of a security issue that has been discovered in phpMyFAQ 2.6.x: phpMyFAQ doesn't sanitize some variables in different pages correctly. With a properly crafted URL it is e.g. possible to inject JavaScript code into the output of a page,...

PHPMyFAQ 2.6.x - index.php Cross-Site Scripting

PHPMyFAQ 2.6.x - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43560/info phpMyFAQ is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in phpMyFAQ before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via 1 the lang parameter in a sitemap action, 2 the search parameter in a search action, 3 the taggingid parameter in a search action, 4 the...

CVE-2009-4780

Multiple cross-site scripting XSS vulnerabilities in index.php in phpMyFAQ before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via 1 the lang parameter in a sitemap action, 2 the search parameter in a search action, 3 the taggingid parameter in a search action, 4 the...

CVE-2009-4780

CVE-2009-4780 affects phpMyFAQ

CVE-2009-4780

Multiple cross-site scripting XSS vulnerabilities in index.php in phpMyFAQ before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via 1 the lang parameter in a sitemap action, 2 the search parameter in a search action, 3 the taggingid parameter in a search action, 4 the...

phpMyFAQ多个页面URL参数跨站脚本漏洞

BUGTRAQ ID: 37180 phpMyFAQ是一款多语言、基于数据库的FAQ系统。 phpMyFAQ没有正确地过滤用户提交给多个页面的变量，远程攻击者可以通过特制的URL请求向页面的输出注入JavaScript代码，导致窃取域Cookie，如会话标识符。 phpMyFAQ 2.5.x 厂商补丁： phpMyFAQ -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.phpmyfaq.de/ http://host/index.php?action=sitemap&lang=code...

phpMyFAQ <= 2.5.4 Multiple XSS Vulnerabilities

No description provided by source. OVERVIEW phpMyFAQ 2.5 is a multilingual, completely database-driven FAQ-system. PoC http://server/phpmyfaq/index.php?action=sitemap=en"scriptalert1/script http://server/phpmyfaq/index.php?search=hello"scriptalertdocument.cookie/script&action=search...

phpMyFAQ <= 2.5.4 Multiple XSS Vulnerabilities

Exploit for unknown platform in category web applications ============================================== phpMyFAQ alert1 http://server/phpmyfaq/index.php?search=hello"alertdocument.cookie&action=search http://server/phpmyfaq/index.php?action=artikel&cat=1&id=1&artlang=en&highlight=you"alert1...

phpMyFAQ 2.5.4 Cross Site Scripting

Mutliple XSS in phpMyFAQ alert1 http://localhost/phpmyfaq/index.php?search=hello"alertdocument.cookie&action=search http://localhost/phpmyfaq/index.php?action=artikel&cat=1&id=1&artlang=en&highlight=you"alert1 http://localhost/phpmyfaq/index.php?action=artikel&cat=1&id=1&artlang=en"alert1...

phpMyFAQ <= 2.5.4 Multiple Unspecified XSS Vulnerabilities

phpMyFAQ is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

phpMyFAQ 2.5.4 and Prior Multiple Unspecified Cross Site Scripting Vulnerabilities

phpMyFAQ is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

phpMyFAQ 2.5.4 - Multiple Cross-Site Scripting Vulnerabilities

phpMyFAQ 2.5.4 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37180/info phpMyFAQ is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

phpMyFAQ < 2.5.4 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37180/info phpMyFAQ is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

phpMyFAQ GET Variable Cross-Site-Scripting Vulnerability

This host is installed with phpMyFAQ and is prone to Cross Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodphpmyfaqgetxssvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ phpMyFAQ GET Variable Cross-Site-Scripting Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...

phpMyFAQ < 2.0.17, 2.5.x < 2.5.2 XSS Vulnerability

phpMyFAQ is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyfaq:phpmyfaq"...

Cross site scripting

Cross-site scripting XSS vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page...

CVE-2009-4040

Cross-site scripting XSS vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page...