1866 matches found
PHPMyFAQ 1.5.1 - Logs Unauthorized Access
source: https://www.securityfocus.com/bid/14930/info PHPMyFAQ is prone to an unauthorized access vulnerability. A remote attacker can exploit this vulnerability to view the application log file. This vulnerability could lead to the disclosure of various valid usernames, which could aid in brute...
PHPMyFAQ 1.5.1 - Local File Inclusion
PHPMyFAQ 1.5.1 - Local File Inclusion source: https://www.securityfocus.com/bid/14929/info PHPMyFAQ is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
PHPMyFAQ 1.5.1 - 'Password.php' SQL Injection
source: https://www.securityfocus.com/bid/14927/info phpMyFAQ is affected by an SQL injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input before using it in a SQL query. This vulnerability could permit remote attackers to pass malicious inp...
PHPMyFAQ 1.5.1 - Logs Unauthorized Access
PHPMyFAQ 1.5.1 - Logs Unauthorized Access source: https://www.securityfocus.com/bid/14930/info PHPMyFAQ is prone to an unauthorized access vulnerability. A remote attacker can exploit this vulnerability to view the application log file. This vulnerability could lead to the disclosure of various...
[SA16441] phpMyFAQ XML-RPC Nested XML Tags PHP Code Execution
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2004-2256
CVE-2004-2256 affects phpMyFAQ 1.4.0 alpha; a directory traversal flaw in the lang (language) parameter allows remote attackers to read arbitrary files and potentially execute local PHP files. The vulnerability arises from unsafely handling .. sequences, enabling access outside the intended direc...
CVE-2004-2256
Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly execute local PHP files, via .. sequences in the lang language variable...
CVE-2004-2255
Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used as part of a template filename...
CVE-2004-2257
phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request...
CVE-2004-2257
CVE-2004-2257 affects phpMyFAQ 1.4.0, where remote attackers can access the Image Manager and upload or delete images without authorization via a direct request. The connected sources corroborate an authentication bypass exposing image management functionality, with practical impact described as ...
CVE-2004-2255
CVE-2004-2255 affects phpMyFAQ
CVE-2004-2257
phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request...
[SA15810] phpMyFAQ XML-RPC PHP Code Execution Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2005-0702
The CVE-2005-0702 entry documents a SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 caused by insufficient sanitization of the username field in forum messages, enabling remote attackers to add FAQ records to the database. The underlying issue is that user input is used in SQL queries without...
CVE-2005-0702
SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages...
[SA14516] phpMyFaq "username" SQL Injection Vulnerability
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
phpMyFAQ Detection
The remote host is running phpMyFAQ, a multi-lingual database-driven FAQ system using PHP and MySQL. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17297; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...
phpMyFAQ Forum Message username Field SQL Injection
The remote host is running a version of phpMyFAQ that fails to sufficiently sanitize the 'username' parameter before using it in SQL queries. As a result, a remote attacker can pass malicious input to database queries, potentially resulting in data exposure, data modification, or attacks against...
