Lucene search
+L

1868 matches found

OSV
OSV
added 2023/04/05 12:0 a.m.35 views

CVE-2023-1880 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

8.3CVSS7.7AI score
SaveExploits0References4
OSV
OSV
added 2023/04/05 12:0 a.m.28 views

CVE-2023-1885 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

6.3CVSS6.3AI score
SaveExploits0References4
OSV
OSV
added 2023/04/05 12:0 a.m.22 views

CVE-2023-1884 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq

Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

4.7CVSS5.4AI score
SaveExploits0References4
OSV
OSV
added 2023/04/05 12:0 a.m.26 views

CVE-2023-1878 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

8.3CVSS7.4AI score
SaveExploits0References4
OSV
OSV
added 2023/04/05 12:0 a.m.25 views

CVE-2023-1886 Authentication Bypass by Capture-replay in thorsten/phpmyfaq

Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

7.3CVSS9.2AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/04/05 12:0 a.m.6 views

PT-2023-17312 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.12 Description: The issue is related to Cross-site Scripting XSS due to the failure to sanitize user input in the stopword parameter. This allows for potential exploitation. The estimated number of...

6.1CVSS4.6AI score0.00447EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2023/04/05 12:0 a.m.8 views

CVE-2023-1879 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

4.7CVSS5.1AI score0.00475EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/04/05 12:0 a.m.8 views

CVE-2023-1884 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq

Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

4.7CVSS5.4AI score0.00447EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/05 12:0 a.m.7 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.12. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

6.1CVSS5.5AI score0.00447EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/05 12:0 a.m.9 views

phpMyFAQ 访问控制错误漏洞

phpMyFAQ is a multilingual, fully database-driven FAQ system by the individual developer Thorsten Rinne. An Access Control Error vulnerability exists in versions prior to phpMyFAQ 3.1.12, which stems from improper access control...

5.4CVSS6.3AI score0.00492EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/04/05 12:0 a.m.8 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by Thorsten Rinne, a personal developer. A cross-site scripting vulnerability exists in phpMyFAQ. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

8.1CVSS6.4AI score0.00532EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/04/05 12:0 a.m.7 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.12, which stems from the presence of a reflected cross-site scripting XSS vulnerability...

8.3CVSS6.7AI score0.01644EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/04/05 12:0 a.m.8 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.12. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

8.1CVSS6.5AI score0.00532EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/04/05 12:0 a.m.17 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.12, which stems from the presence of a stored cross-site scripting XSS vulnerability...

5.4CVSS6AI score0.00472EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/04/05 12:0 a.m.6 views

PT-2023-17313 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.12 Description: The issue is related to stored Cross-site Scripting XSS due to the failure to sanitize user input in the category field name parameter. This allows for the storage of malicious scripts...

6.3CVSS5.4AI score0.00476EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2023/04/05 12:0 a.m.8 views

PT-2023-17315 · Thorsten · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.12 Description: The issue concerns business logic errors in the thorsten/phpmyfaq GitHub repository. Specifically, users with edit-only permissions could add and delete categories and add FAQs, despite...

8.3CVSS5.8AI score0.00699EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2023/04/05 12:0 a.m.5 views

PT-2023-17308 · Thorsten · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.12 Description: The issue is related to Cross-site Scripting XSS, specifically reflected and stored XSS. It occurs because the software fails to properly sanitize user input in the artlang parameter. Th...

8.3CVSS6.5AI score0.01644EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
added 2023/04/05 12:0 a.m.10 views

CVE-2023-1886 Authentication Bypass by Capture-replay in thorsten/phpmyfaq

Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

7.3CVSS8.5AI score0.00875EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/04/05 12:0 a.m.7 views

CVE-2023-1882 Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

8.1CVSS6AI score0.00532EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/04/05 12:0 a.m.44 views

CVE-2023-1757 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

8.1CVSS5.8AI score0.00532EPSS
SaveExploits1References2
Rows per page
Query Builder