phpMyFAQ 安全漏洞

phpMyFAQ is a multilingual, fully database-driven FAQ system by the individual developer Thorsten Rinne. A security vulnerability exists in phpMyFAQ versions prior to 3.1.12, which stems from weak password requirements...

PT-2023-17221 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.12 Description: The issue concerns Code Injection and Cross-site Scripting in the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.12, update to version 3.1.12 or later to...

PT-2023-17220 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.12 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation and later displays it, allowing attackers to injec...

PT-2023-17214 · Phpmyfaq · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: phpMyFAQ versions prior to 3.1.12 Description: The issue is related to improper neutralization of input during web page generation, which can also be described as improper input validation. This affects the GitHub repository thorsten/phpmyfaq...

CVE-2023-1754 Improper Neutralization of Input During Web Page Generation in thorsten/phpmyfaq

Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-1755 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq

Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-1762

The CVE-2023-1762 issue affects phpMyFAQ (thorsten/phpmyfaq) and stems from improper privilege management. Prior to version 3.1.12, any user who can add a new user could grant themselves super admin rights, enabling privilege escalation. Affected component: user/privilege handling within the appl...

CVE-2023-1755

CVE-2023-1755 : A cross-site scripting (XSS) vulnerability exists in the thorsten/phpmyfaq GitHub repository, affecting versions prior to 3.1.12. The issue is described across multiple sources (NVD, OSV, GHSA, CNNVD, PT-Security) as a generic XSS in phpMyFAQ before 3.1.12. The remediation stated ...

CVE-2023-1761 Cross-site Scripting in thorsten/phpmyfaq

Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.12, which stems from the presence of stored cross-site scripting XSS...

CVE-2023-1762 Improper Privilege Management in thorsten/phpmyfaq

Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-1755 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq

Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-1759 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

PT-2023-17213 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.12 Description: The issue concerns weak password requirements in the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.12, update to version 3.1.12 or later to resolve the...

PT-2023-17222 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.12 Description: The issue concerns improper privilege management, allowing any user who can add a new user to create a user with super admin rights. This has been fixed in version 3.1.12. Recommendation...

CVE-2023-1761 Cross-site Scripting in thorsten/phpmyfaq

Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-1762 Improper Privilege Management in thorsten/phpmyfaq

Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.12, which stems from the presence of stored cross-site scripting XSS...

CVE-2023-1753

CVE-2023-1753 covers weak password requirements in the GitHub repository for thorsten/phpMyFAQ before version 3.1.12. Multiple connected sources confirm this vulnerability class and its affected scope: phpMyFAQ prior to 3.1.12, stemming from weak password policies, with advisories and CVE records...

CVE-2023-1754

CVE-2023-1754 describes an improper neutralization of input during web page generation in the GitHub repository thorsten/phpmyfaq prior to 3.1.12, identified as a cross-site scripting risk in multiple sources. The vulnerability affects phpMyFAQ before 3.1.12 and is rooted in insufficient input ha...