1756 matches found
Cross-site Scripting (XSS)
phpMyFaq is vulnerable to cross-site scripting XSS attacks. The library does not properly sanitize the questions field when entering a new question through inc/PMF/Faq.php, allowing a malicious user to inject arbitrary web script through it. The web script is then executed when a user clicks on t...
phpMyFAQ cross-site scripting vulnerability (CNVD-2017-34019)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site scripting vulnerability exists in...
PHPMyFAQ 2.9.8 - Cross-Site Scripting (1)
Exploit Title: phpMyFAQ 2.9.8 Stored XSS Vendor Homepage: http://www.phpmyfaq.de/ Software Link: http://download.phpmyfaq.de/phpMyFAQ-2.9.8.zip Exploit Author: Ishaq Mohammed Contact: https://twitter.com/securityprince Website: https://about.me/security-prince Category: webapps CVE: CVE-2017-1461...
phpMyFAQ < 2.9.9 Multiple XSS And CSRF Vulnerabilities
phpMyFAQ is prone to multiple cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
phpMyFAQ 2.9.8 Cross Site Scripting
Exploit Title: phpMyFAQ 2.9.8 Stored XSS Vendor Homepage: http://www.phpmyfaq.de/ Software Link: http://download.phpmyfaq.de/phpMyFAQ-2.9.8.zip Exploit Author: Ishaq Mohammed Contact: https://twitter.com/securityprince Website: https://about.me/security-prince Category: webapps CVE: CVE-2017-1461...
PHPMyFAQ 2.9.8 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: phpMyFAQ 2.9.8 Stored XSS Vendor Homepage: http://www.phpmyfaq.de/ Software Link: http://download.phpmyfaq.de/phpMyFAQ-2.9.8.zip Exploit Author: Ishaq Mohammed Contact: https://twitter.com/securityprince Website:...
PHPMyFAQ 2.9.8 - Cross-Site Scripting (1)
PHPMyFAQ 2.9.8 - Cross-Site Scripting 1 Exploit Title: phpMyFAQ 2.9.8 Stored XSS Vendor Homepage: http://www.phpmyfaq.de/ Software Link: http://download.phpmyfaq.de/phpMyFAQ-2.9.8.zip Exploit Author: Ishaq Mohammed Contact: https://twitter.com/securityprince Website:...
Cross site scripting
Cross-site scripting XSS vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action...
CVE-2017-14618
Cross-site scripting XSS vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action...
CVE-2017-14619
Cross-site scripting XSS vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module...
Cross site scripting
Cross-site scripting XSS vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module...
CVE-2017-14619
Cross-site scripting XSS vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module...
CVE-2017-14618
Cross-site scripting XSS vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action...
CVE-2017-14619
CVE-2017-14619 affects phpMyFAQ <= 2.9.8. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary script/HTML via the "Title of your FAQ" field in the Configuration Module. Multiple connected sources corroborate a stored/reflected-like XSS path i...
CVE-2017-14618
Cross-site scripting XSS vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action...
CVE-2017-14619
Cross-site scripting XSS vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module...
CVE-2017-14618
CVE-2017-14618 is a documented XSS vulnerability in phpMyFAQ up to version 2.9.8. The flaw resides in inc/PMF/Faq.php, allowing an attacker to inject arbitrary web script or HTML via the Questions field in an Add New FAQ action. Public references (Exploit-DB and packetstorm) confirm a stored XSS ...
phpmyfaq -- multiple issues
phpmyfaq developers report: Cross-site scripting XSS vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action. Cross-site scripting XSS vulnerability in phpMyFAQ through 2.9.8 allow...
Cross-site Request Forgery (CSRF)
phpMyFAQ is vulnerable to cross-site request forgery CSRF. The library does not properly escape certain strings, allowing a malicious website to change a user's settings...
Brute Force Attacks
phpMyFAQ is vulnerable to brute force attacks. The library does not lockout an account after too many failed attempts, allowing a malicious user to brute force a password to an account...