139 matches found
EUVD-2006-3057
Malware in sbrugna...
EUVD-2010-1364
Malware in sbrugna...
EUVD-2007-1009
Malware in sbrugna...
EUVD-2007-0673
Malware in sbrugna...
EUVD-2017-9482
Malware in sbrugna...
EUVD-2022-43295
Malicious code in bioql PyPI...
CVE-2025-57425: Improper Neutralization of Input During Web Page Generation
A Stored Cross-Site Scripting XSS vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint...
CVE-2024-2070 SourceCodester FAQ Management System add-faq.php cross site scripting
A vulnerability classified as problematic was found in SourceCodester FAQ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-faq.php. The manipulation of the argument question/answer leads to cross site scripting. The attack can be launched...
CVE-2024-2070 SourceCodester FAQ Management System add-faq.php cross site scripting
A vulnerability classified as problematic was found in SourceCodester FAQ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-faq.php. The manipulation of the argument question/answer leads to cross site scripting. The attack can be launched...
CVE-2024-2070: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in SourceCodester FAQ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-faq.php. The manipulation of the argument question/answer leads to cross site scripting. The attack can be launched...
PT-2024-18695
Name of the Vulnerable Software and Affected Versions SourceCodester FAQ Management System version 1.0 Description A problematic issue was found in the system, affecting an unknown functionality of the file "/endpoint/add-faq.php". The manipulation of the question/answer argument leads to...
CVE-2024-2069: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in SourceCodester FAQ Management System 1.0. Affected is an unknown function of the file /endpoint/delete-faq.php. The manipulation of the argument faq leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
Cross-site Scripting (XSS)
phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to the lack of HTML elements validation in Faq.php, which allows an attacker to inject and execute malicious JavaScript in the browser...
Cross-site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to the missing conversion for HTML entities in Faq.php, allowing an attacker to inject and execute malicious JavaScript...
Cross site scripting
A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the file bbs/faq.php of the component FAQ Key ID Handler. The manipulation of the argument fmid leads to cross site scripting. It is possible to launch the attack remotely. Upgrading ...
CVE-2022-3963
A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the file bbs/faq.php of the component FAQ Key ID Handler. The manipulation of the argument fmid leads to cross site scripting. It is possible to launch the attack remotely. Upgrading ...
CVE-2022-3963 gnuboard5 FAQ Key ID faq.php cross site scripting
A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the file bbs/faq.php of the component FAQ Key ID Handler. The manipulation of the argument fmid leads to cross site scripting. It is possible to launch the attack remotely. Upgrading ...
CVE-2017-18364
phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter...
CVE-2017-18364
CVE-2017-18364 concerns phpFK lite and is a reflected cross-site scripting (XSS) vulnerability. The affected components are the web interface files faq.php, members.php, search.php (via query strings) and user.php (via the user parameter). The underlying issue is that user-supplied input in these...
PT-2019-8301
Name of the Vulnerable Software and Affected Versions phpFK lite affected versions not specified Description The issue concerns an XSS vulnerability. It can be exploited via the query string in faq.php, members.php, or search.php, or through the user parameter in user.php. Recommendations At the...