6714 matches found
CVE-2023-5861
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 2.0...
CVE-2023-5862
Missing Authorization in GitHub repository hamza417/inure prior to Build95...
Session fixation
Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2...
Session fixation
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1...
CVE-2023-5866 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1...
CVE-2023-5866 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1...
CVE-2023-5867
Summary (CVE-2023-5867) : Stored cross-site scripting vulnerability in the PHPMyFAQ project prior to version 3.2.2. Root cause identified in multiple sources as lack of proper filtering/escaping of user-supplied data in the FileName parameter of the file-attachment upload function, enabling injec...
CVE-2023-5865 Insufficient Session Expiration in thorsten/phpmyfaq
Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2...
CVE-2023-5865 Insufficient Session Expiration in thorsten/phpmyfaq
Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2...
CVE-2023-5864 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1...
CVE-2023-5864 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1...
CVE-2023-5862 Missing Authorization in hamza417/inure
Missing Authorization in GitHub repository hamza417/inure prior to Build95...
CVE-2023-5861 Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 2.0...
CVE-2023-5862 Missing Authorization in hamza417/inure
Missing Authorization in GitHub repository hamza417/inure prior to Build95...
CVE-2023-5862 Missing Authorization in hamza417/inure
Missing Authorization in GitHub repository hamza417/inure prior to Build95...
CVE-2023-5833
Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0...
Input validation
Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0...
CVE-2023-5833
The connected Huntr document provides concrete details for CVE-2023-5833: an improper access control flaw in mintplex-labs/anything-llm prior to 0.1.0 that allows overwriting backend environment variables via the /api/system/update-env endpoint. The vulnerability arises from how KEY_MAPPING expos...