2547 matches found
phpMyFAQ 跨站脚本漏洞
phpMyFAQ is a multi-language, fully database-driven FAQ system. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.2.2, which stems from the lack of effective filtering and escaping of user-supplied data in the action parameter of admin/index.php?action=, and can be...
PT-2023-32385
Name of the Vulnerable Software and Affected Versions phpmyfaq versions prior to 3.2.1 Description The issue concerns a sensitive cookie in an HTTPS session that lacks the 'Secure' attribute. This could potentially allow unauthorized access to session data. Recommendations For versions prior to...
phpMyFAQ 安全漏洞
phpMyFAQ is a multi-language, fully database-driven FAQ system. An information disclosure vulnerability exists in phpMyFAQ versions prior to 3.2.2, which stems from the presence of sensitive cookies in an HTTPS session, and can be exploited by an attacker to obtain sensitive information...
phpMyFAQ 代码问题漏洞
phpMyFAQ is a multi-language, fully database-driven FAQ system. An access control error vulnerability exists in versions prior to phpMyFAQ 3.2.2, which stems from the presence of insufficient session expiration. An attacker can exploit this vulnerability to still use old sessions...
CVE-2023-5863: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2...
PT-2023-32382
Name of the Vulnerable Software and Affected Versions thorsten/phpmyfaq versions prior to 3.2.2 Description The issue is related to Cross-site Scripting XSS - Reflected. This means an attacker can inject malicious scripts into a website, which will be executed by the user's browser. Recommendatio...
CVE-2023-5865: Insufficient Session Expiration
Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2...
CVE-2023-5864: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1...
CVE-2023-5866: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1...
PT-2023-32384 · Phpmyfaq · Phpmyfaq
Name of the Vulnerable Software and Affected Versions: phpmyfaq versions prior to 3.2.2 Description: The issue is related to insufficient session expiration. Recommendations: For versions prior to 3.2.2, update to version 3.2.2 or later to resolve the issue...
PT-2023-32383 · Thorsten · Phpmyfaq
Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.2.1 Description: The issue is related to Cross-site Scripting XSS - Stored, which means an attacker can inject malicious scripts into the application, potentially affecting users who access the compromise...
PT-2023-32386
Name of the Vulnerable Software and Affected Versions thorsten/phpmyfaq versions prior to 3.2.2 Description The issue is related to Cross-site Scripting XSS - Stored, which means an attacker can inject malicious scripts into the application. Recommendations For versions prior to 3.2.2, update to...
CVE-2023-5867: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2...
phpmyfaq -- multiple vulnerabilities
phpmyfaq developers report: XSS Insufficient session expiration...
Cross-Site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross Site Scripting. The vulnerability is due to a lack of url sanitization in instances.php which allow an attacker to pass a malicious URL...
Unrestricted File Upload
thorsten/phpmyfaq is vulnerable to Unrestricted File Upload. The vulnerability is due to the system allowing the upload of arbitrary files without validating the MIME type. An attacker can exploit this issue by uploading malicious files to the server, potentially leading to remote code execution...
Cross Site Scripting
thorsten/phpmyfaq is vulnerable to Cross Site Scripting. The vulnerability is due to improper sanitization of data. This can be exploited by an attacker to inject malicious JavaScript into the web application...
phpMyFAQ < 3.1.18 Multiple Vulnerabilities
phpMyFAQ is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyfaq:phpmyfaq"; if description...
Stored XSS in Attachment File Name
Description A stored cross-site scripting vulnerability exists within the file attachment upload functionality. Replication Steps 0x01. As a user with only the "Edit Record" and "Add Attachments" permissions, the user proceeded to edit a FAQ record and clicked "Add new attachment", as seen in the...
