1868 matches found
CVE-2023-0794 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0788 Code Injection in thorsten/phpmyfaq
Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0793 Weak Password Requirements in thorsten/phpmyfaq
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0793
In phpMyFAQ, versions prior to 3.1.11 are affected by a weakness in password requirements that can permit weak credentials to be used, as documented across multiple sources. The CVE entry identifies the issue as CVE-2023-0793 with high impact per NVD metrics, but the connected documents do not pr...
CVE-2023-0794
CVE-2023-0794 is a Cross-site Scripting (XSS) vulnerability described as stored in the GitHub project thorsten/phpmyfaq, affecting versions prior to 3.1.11. The connected documents consistently identify this XSS issue across multiple feeds (NVD, Red Hat, OSV, GHSA, CNVD, etc.). They do not provid...
CVE-2023-0787
CVE-2023-0787 affects phpMyFAQ (thorsten/phpmyfaq) prior to version 3.1.11. The issue is a Cross-site Scripting (XSS) vulnerability originating from the application, with the vulnerability described as generic XSS in multiple sources (CVE entry, OSV, CNVD, GHSA). The root cause details are not el...
CVE-2023-0792 Code Injection in thorsten/phpmyfaq
Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
Cross-site Scripting (XSS)
phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to missing conversions of HTML entities in the library, allowing an attacker to inject and execute malicious JavaScript...
Cross-site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to missing checks on redirect values in index.php, allowing an attacker to inject and execute malicious JavaScript...
Cross-Site Scripting (XSS)
phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to improper user input sanitization in add.php which allows an attacker to inject and execute arbitrary scripts...
Cross-Site Scripting (XSS)
phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to improper sanitization of user inputs in index.php which allows an attacker to inject and execute arbitrary JavaScript...
Cross-Site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper user input sanitization in record.comments.php which allows an attacker to inject and execute arbitrary scripts...
Cross-site Scripting (XSS)
phpmyfaq is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end in header.php, which allows an attacker to inject and execute malicious JavaScript...
Cross-site Scripting (XSS)
phpmyfaq is vulnerable to Cross-Site ScriptingXSS attacks. The library does not properly escape the user input before converting to HTML entities, which allows an attacker to inject and execute malicious code on the target system...
FreeBSD : phpmyfaq -- multiple vulnerabilities (005dfb48-990d-11ed-b9d3-589cfc0f81b0)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 005dfb48-990d-11ed-b9d3-589cfc0f81b0 advisory. - phpmyfaq developers report: phpMyFAQ does not implement sufficient checks to avoid a stored XSS in Ad...
GHSA-4P88-CFHQ-F3VG phpMyFAQ has Weak Password Requirements
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...
GHSA-W475-749H-C77M phpMyFAQ Stored Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...
phpMyFAQ has Weak Password Requirements
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...