Lucene search
K

1756 matches found

Veracode
Veracode
added 2023/01/26 5:17 a.m.16 views

Cross-site Scripting (XSS)

phpmyfaq is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end in header.php, which allows an attacker to inject and execute malicious JavaScript...

5.4CVSS5.2AI score0.00244EPSS
Exploits0References3Affected Software2
Veracode
Veracode
added 2023/01/24 1:29 a.m.16 views

Cross-site Scripting (XSS)

phpmyfaq is vulnerable to Cross-Site ScriptingXSS attacks. The library does not properly escape the user input before converting to HTML entities, which allows an attacker to inject and execute malicious code on the target system...

5.4CVSS5.7AI score0.0041EPSS
Exploits0References4Affected Software2
Tenable Nessus
Tenable Nessus
added 2023/01/20 12:0 a.m.12 views

FreeBSD : phpmyfaq -- multiple vulnerabilities (005dfb48-990d-11ed-b9d3-589cfc0f81b0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 005dfb48-990d-11ed-b9d3-589cfc0f81b0 advisory. - phpmyfaq developers report: phpMyFAQ does not implement sufficient checks to avoid a stored XSS in Ad...

5.5AI score
Exploits0References10
Github Security Blog
Github Security Blog
added 2023/01/16 12:30 a.m.17 views

phpMyFAQ Stored Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

7.6CVSS5.2AI score0.00244EPSS
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2023/01/16 12:30 a.m.23 views

phpMyFAQ Stored Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

9.1CVSS5.2AI score0.0041EPSS
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2023/01/16 12:30 a.m.23 views

phpMyFAQ has Weak Password Requirements

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

9.8CVSS9AI score0.00796EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2023/01/16 12:30 a.m.19 views

GHSA-4P88-CFHQ-F3VG phpMyFAQ has Weak Password Requirements

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

9.8CVSS7.3AI score0.00796EPSS
Exploits0References4
OSV
OSV
added 2023/01/16 12:30 a.m.16 views

GHSA-96X6-JF5W-84C5 phpMyFAQ Stored Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

5.4CVSS5.4AI score0.0041EPSS
Exploits0References4
OSV
OSV
added 2023/01/16 12:30 a.m.12 views

GHSA-W475-749H-C77M phpMyFAQ Stored Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

5.4CVSS5.4AI score0.00244EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2023/01/16 12:30 a.m.30 views

phpMyFAQ Stored Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

8.6CVSS5.2AI score0.00244EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2023/01/16 12:30 a.m.18 views

GHSA-M9XR-8CX7-53PJ phpMyFAQ Reflected Cross-site Scripting vulnerability

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

6.1CVSS6.1AI score0.00309EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2023/01/16 12:30 a.m.17 views

phpMyFAQ Stored Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

5.4CVSS5.2AI score0.00261EPSS
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2023/01/16 12:30 a.m.39 views

thorsten/phpmyfaq is vulnerable to cross-site scripting (XSS)

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

8.6CVSS5.8AI score0.00674EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2023/01/16 12:30 a.m.21 views

GHSA-X2H8-4MHH-5HWH phpMyFAQ Stored Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

5.4CVSS5AI score0.00261EPSS
Exploits0References4
OSV
OSV
added 2023/01/16 12:30 a.m.23 views

GHSA-G92R-9RXW-CMGX phpMyFAQ Improper Authentication vulnerability

Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

9.8CVSS7.2AI score0.01393EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2023/01/16 12:30 a.m.29 views

phpMyFAQ Stored Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

9.8CVSS5.2AI score0.00317EPSS
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2023/01/16 12:30 a.m.25 views

phpMyFAQ Improper Authentication vulnerability

Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

9.8CVSS9AI score0.01393EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2023/01/16 12:30 a.m.16 views

GHSA-9JFF-8XMM-MW22 phpMyFAQ Stored Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

5.4CVSS5.4AI score0.00317EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2023/01/16 12:0 a.m.19 views

phpMyFAQ < 3.1.10 Multiple Vulnerabilities

phpMyFAQ is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyfaq:phpmyfaq"; if description...

9.8CVSS7.2AI score0.01393EPSS
Exploits0References9
CNVD
CNVD
added 2023/01/16 12:0 a.m.18 views

phpMyFAQ cross-site scripting vulnerability (CNVD-2023-04313)

phpMyFAQ is a multi-language, fully database-driven FAQ system. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.1.10, which stems from the presence of stored cross-site scripting XSS. No details of the vulnerability are provided at this time...

8.6CVSS6AI score0.00674EPSS
Exploits0References1
Rows per page
Query Builder