1868 matches found
CVE-2023-1884
CVE-2023-1884 affects thorsten/phpmyfaq prior to version 3.1.12, with a cross-site scripting (XSS) vulnerability in the stopword parameter due to insufficient input sanitization. The issue is fixed in 3.1.12. Affected versions: before 3.1.12; impact is XSS as described in multiple sources (GHSA e...
CVE-2023-1879
CVE-2023-1879 affects thorsten/phpmyfaq before version 3.1.12, where a stored XSS vulnerability exists due to improper sanitization in the updatecategory parameter. The issue can lead to execution of malicious scripts when affected data is accessed. Public documents consistently cite the fix in v...
CVE-2023-1883 Improper Access Control in thorsten/phpmyfaq
Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1882 Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq
Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1879 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
phpMyFAQ < 3.1.12 Multiple Vulnerabilities
phpMyFAQ is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyfaq:phpmyfaq"; if description...
Multiple Stored XSS via mail parameter
Description In PhpMyFaq, while submitting a question, the mail parameter is accepting unsanitized user input which leads to Stored XSS vulnerability, executing on Admin Panel /admin/?action=question. Proof of Concept 1. Go to https://roy.demo.phpmyfaq.de/index.php?action=ask&categoryid=0 1. Fill ...
phpMyFAQ has weak password requirements
Weak password requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
phpMyFAQ vulnerable to improper input validation
Improper Neutralization of Input During Web Page Generation in phpMyFAQ...
phpMyFAQ Cross-site Scripting vulnerability
Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
phpMyFAQ Stored Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
GHSA-4P4M-5QP7-479X phpMyFAQ has weak password requirements
Weak password requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
phpMyFAQ Code Injection vulnerability
Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
GHSA-6CPG-GQGQ-2RRR phpMyFAQ Code Injection vulnerability
Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
GHSA-XWW4-W6FF-5Q3G thorsten/phpmyfaq vulnerable privilege escalation from improper privilege management
thorsten/phpmyfaq prior to 3.1.12 is vulnerable to privilege escalation from improper privilege management. Any user with the ability to add a new user can create a user with super admin rights. This has been fixed in 3.1.12...
CVE-2023-1759
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1760
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1761
Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
