Lucene search
+L

285 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/12 12:00 a.m.•0 views

CVE-2023-0793: Weak Password Requirements

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

8.8CVSS5.8AI score0.00707EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/02/12 12:00 a.m.•7 views

CVE-2023-0794 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

8.3CVSS6.2AI score0.00558EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/02/12 12:00 a.m.•48 views

CVE-2023-0788 Code Injection in thorsten/phpmyfaq

Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

8.1CVSS10AI score0.00886EPSS
SaveExploits0References2
Veracode
Veracode
•added 2023/01/29 6:15 a.m.•25 views

Cross-site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to missing checks on redirect values in index.php, allowing an attacker to inject and execute malicious JavaScript...

6.1CVSS6AI score0.00513EPSS
SaveExploits0References4Affected Software2
Veracode
Veracode
•added 2023/01/26 6:14 a.m.•24 views

Cross-Site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper user input sanitization in record.comments.php which allows an attacker to inject and execute arbitrary scripts...

5.4CVSS5.5AI score0.00546EPSS
SaveExploits0References4Affected Software2
Positive Technologies
Positive Technologies
•added 2023/01/15 12:00 a.m.•7 views

PT-2023-16164 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts...

8.6CVSS6.2AI score0.00487EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2023/01/15 12:00 a.m.•5 views

CVE-2023-0313 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

4.7CVSS5.9AI score0.00401EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/15 12:00 a.m.•1 views

CVE-2023-0307: Weak Password Requirements

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

9.8CVSS5.8AI score0.00643EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/01/15 12:00 a.m.•32 views

CVE-2023-0314 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

6.5CVSS6.5AI score0.00513EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/01/15 12:00 a.m.•49 views

CVE-2023-0307 Weak Password Requirements in thorsten/phpmyfaq

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

5.7CVSS9.8AI score0.00643EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/15 12:00 a.m.•0 views

CVE-2023-0306: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

9.1CVSS5.8AI score0.00541EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/15 12:00 a.m.•0 views

CVE-2023-0314: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

6.5CVSS5.8AI score0.00513EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/15 12:00 a.m.•0 views

CVE-2023-0310: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

9.8CVSS5.8AI score0.00546EPSS
SaveExploits0References2
CVE
CVE
•added 2023/01/15 12:00 a.m.•85 views

CVE-2023-0306

The CVE-2023-0306 entry concerns the PHPMyFAQ project (thorsten/phpmyfaq) with a Stored Cross-site Scripting (XSS) vulnerability present in versions prior to 3.1.10. The available connected documents consistently describe a Stored XSS flaw in this software, originating from un Sanitized input per...

9.1CVSS7.2AI score0.00541EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/15 12:00 a.m.•6 views

CVE-2023-0312 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

8.6CVSS5.9AI score0.00562EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/01/15 12:00 a.m.•5 views

CVE-2023-0307 Weak Password Requirements in thorsten/phpmyfaq

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

5.7CVSS6.8AI score0.00643EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/01/15 12:00 a.m.•4 views

CVE-2023-0308 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

7.6CVSS5.9AI score0.00487EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/01/15 12:00 a.m.•8 views

PT-2023-16166 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue concerns improper authentication in the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.10, update to version 3.1.10 or later to resolve the iss...

9.8CVSS5.6AI score0.00928EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/15 12:00 a.m.•0 views

CVE-2023-0313: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

5.4CVSS5.8AI score0.00401EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/15 12:00 a.m.•0 views

CVE-2023-0309: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

8.6CVSS5.8AI score0.00487EPSS
SaveExploits0References2
Rows per page
Query Builder