Lucene search
+L

1868 matches found

Positive Technologies
Positive Technologies
added 2022/10/31 12:0 a.m.4 views

PT-2022-24035 · Phpmyfaq · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: phpMyFAQ versions prior to 3.1.8 Description: The issue is related to stored Cross-site Scripting XSS in the phpMyFAQ repository. This type of attack involves an attacker injecting malicious scripts into a website, which are then stored on th...

8.2CVSS6AI score0.00528EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2022/10/31 12:0 a.m.41 views

CVE-2022-3765 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.8...

8.2CVSS5.8AI score0.00528EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2022/10/31 12:0 a.m.11 views

CVE-2022-3766 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8...

7.3CVSS6AI score0.05743EPSS
SaveExploits3References2
CVE
CVE
added 2022/10/31 12:0 a.m.82 views

CVE-2022-3765

CVE-2022-3765 is a stored Cross-site Scripting (XSS) vulnerability affecting phpMyFAQ versions prior to 3.1.8 (repository: thorsten/phpmyfaq). The incident is described across multiple sources as storing unvalidated user input that can be delivered to other users, with the impacted component bein...

8.2CVSS5.5AI score0.00528EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/10/31 12:0 a.m.7 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A security vulnerability exists in phpMyFAQ versions prior to 3.1.8, which stems from the presence of cross-site scripting XSS...

7.3CVSS6.7AI score0.05743EPSS
SaveExploits3References5
CNNVD
CNNVD
added 2022/10/31 12:0 a.m.5 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A security vulnerability exists in phpMyFAQ versions prior to 3.1.8. An attacker exploited the vulnerability to perform cross-site scripting attacks...

8.2CVSS6.6AI score0.00528EPSS
SaveExploits1References3
CVE
CVE
added 2022/10/31 12:0 a.m.86 views

CVE-2022-3766

CVE-2022-3766 affects phpMyFAQ versions prior to 3.1.8. The nuclei template and related sources describe a reflected Cross-Site Scripting (XSS) vulnerability in the search functionality, where user input is not properly sanitized, allowing injected JavaScript to execute in other users’ browsers. ...

7.3CVSS6.1AI score0.05743EPSS
SaveExploits3References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/31 12:0 a.m.7 views

CVE-2022-3765 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.8...

8.2CVSS5.3AI score0.00528EPSS
SaveExploits1References2
OSV
OSV
added 2022/10/31 12:0 a.m.30 views

CVE-2022-3765 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.8...

8.2CVSS7.4AI score
SaveExploits0References4
OSV
OSV
added 2022/10/31 12:0 a.m.19 views

CVE-2022-3766 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8...

7.3CVSS7.4AI score
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2022/10/29 7:0 p.m.42 views

phpMyFAQ contains Weak Password Requirements

phpMyFAQ prior to version 3.1.8 has Weak Password Requirements. Version 3.1.8 introduces an eight-character minimum password length...

9.8CVSS9.1AI score0.01139EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/10/29 7:0 p.m.31 views

GHSA-2RR3-RV49-P42F phpMyFAQ contains Weak Password Requirements

phpMyFAQ prior to version 3.1.8 has Weak Password Requirements. Version 3.1.8 introduces an eight-character minimum password length...

9.8CVSS9.5AI score0.01139EPSS
SaveExploits1References4
NVD
NVD
added 2022/10/29 1:15 p.m.39 views

CVE-2022-3754

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8...

9.8CVSS0.01139EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/10/29 12:0 a.m.43 views

CVE-2022-3754 Weak Password Requirements in thorsten/phpmyfaq

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8...

7.5CVSS9.8AI score0.01139EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2022/10/29 12:0 a.m.6 views

CVE-2022-3754 Weak Password Requirements in thorsten/phpmyfaq

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8...

7.5CVSS9.7AI score0.01139EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/10/29 12:0 a.m.5 views

phpMyFAQ 安全漏洞

phpMyFAQ is a multilingual, fully database-driven FAQ system by the individual developer Thorsten Rinne. A security vulnerability exists in phpMyFAQ versions prior to 3.1.8, which stems from the presence of weak passwords...

9.8CVSS7.4AI score0.01139EPSS
SaveExploits1References3
CVE
CVE
added 2022/10/29 12:0 a.m.124 views

CVE-2022-3754

CVE-2022-3754 affects the phpMyFAQ project (thorsten/phpmyfaq), before version 3.1.8. The root issue is weak password requirements; versions prior to 3.1.8 allow inadequate password length. The 3.1.8 release introduces an eight-character minimum password length. No exploit details are provided in...

9.8CVSS8.6AI score0.01139EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/29 12:0 a.m.9 views

PT-2022-24019 · Phpmyfaq · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: phpMyFAQ versions prior to 3.1.8 Description: The issue concerns weak password requirements in the phpMyFAQ repository. Specifically, versions prior to 3.1.8 are affected due to inadequate password length requirements. Version 3.1.8 introduce...

9.8CVSS7.5AI score0.01139EPSS
SaveExploits1References8
FreeBSD
FreeBSD
added 2022/10/24 12:0 a.m.9 views

phpmyfaq -- multiple vulnerabilities

phpmyfaq developers report: a pre-auth SQL injection in then saving user comments a reflected cross-site scripting vulnerability in the search a stored cross-site scripting vulnerability in the meta data administration a weak password requirement...

2.1AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/10/21 12:0 a.m.4 views

FreeBSD : phpmyfaq -- CSRF vulnerability (c253c4aa-5126-11ed-8a21-589cfc0f81b0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c253c4aa-5126-11ed-8a21-589cfc0f81b0 advisory. - phpmyfaq developers report: phpMyFAQ does not implement sufficient checks to avoid CSRF when logging...

5.6AI score
SaveExploits0References2
Rows per page
Query Builder