1868 matches found
CVE-2014-6045
CVE-2014-6045 pertains to the PHPMyFAQ package, where versions before 2.8.13 are affected by an SQL injection vulnerability. The issue enables remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the restore function. The root cause is improp...
CVE-2014-6049
CVE-2014-6049 affects phpMyFAQ prior to version 2.8.13, where remote authenticated users with admin privileges can bypass authorization by manipulating a crafted instance ID parameter. The root cause involves improper handling of the instance ID, enabling privilege escalation: an admin user could...
CVE-2014-6048
phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request...
CVE-2014-6045
SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the restore function...
phpMyFAQ 2.9.9 Code Injection
Exploit Title: PHPMYFAQ 2.9.9 Code Injection Google Dork: NA Date: Nov 6 2017 Exploit Author: tomplixsee Author blog : cupuzone.wordpress.com Vendor Homepage: http://www.phpmyfaq.de Software Link: http://download.phpmyfaq.de/phpMyFAQ-2.9.9.zip Version: 2.9.9 Tested on: Ubuntu Server 16.04, PHP...
phpMyFAQ 2.9.8 - Cross-Site Request Forgery Vulnerability
Exploit for php platform in category web applications Exploit Title: phpMyFAQ 2.9.8 CSRF Vulnerability Exploit Author: Nikhil Mittal Payatu Labs Vendor Homepage: http://www.phpmyfaq.de/ Software Link: http://download.phpmyfaq.de/phpMyFAQ-2.9.8.zip Version: 2.9.8 Tested on: MAC OS CVE : 2017-15730...
PHPMyFAQ 2.9.8 - Cross-Site Scripting (3)
PHPMyFAQ 2.9.8 - Cross-Site Scripting 3 Exploit Title: phpMyFAQ 2.9.8 Stored XSS Vulnerability Date: 28-9-2017 Exploit Author: Nikhil Mittal Payatu Labs Vendor Homepage: http://www.phpmyfaq.de/ Software Link: http://download.phpmyfaq.de/phpMyFAQ-2.9.8.zip Version: 2.9.8 Tested on: MAC OS CVE :...
PHPMyFAQ 2.9.8 - Cross-Site Scripting (3)
Exploit Title: phpMyFAQ 2.9.8 Stored XSS Vulnerability Date: 28-9-2017 Exploit Author: Nikhil Mittal Payatu Labs Vendor Homepage: http://www.phpmyfaq.de/ Software Link: http://download.phpmyfaq.de/phpMyFAQ-2.9.8.zip Version: 2.9.8 Tested on: MAC OS CVE : 2017-15727 1. Description In phpMyFAQ befo...
phpMyFAQ 2.9.8 - Cross-Site Request Forgery
phpMyFAQ 2.9.8 - Cross-Site Request Forgery Exploit Title: phpMyFAQ 2.9.8 CSRF Vulnerability Date: 27-9-2017 Exploit Author: Nikhil Mittal Payatu Labs Vendor Homepage: http://www.phpmyfaq.de/ Software Link: http://download.phpmyfaq.de/phpMyFAQ-2.9.8.zip Version: 2.9.8 Tested on: MAC OS CVE :...
phpMyFAQ 2.9.8 - Cross-Site Request Forgery
Exploit Title: phpMyFAQ 2.9.8 CSRF Vulnerability Date: 27-9-2017 Exploit Author: Nikhil Mittal Payatu Labs Vendor Homepage: http://www.phpmyfaq.de/ Software Link: http://download.phpmyfaq.de/phpMyFAQ-2.9.8.zip Version: 2.9.8 Tested on: MAC OS CVE : 2017-15730 1. Description In phpMyFAQ before...
Cross-site Scripting (XSS)
phpmyfaq is vulnerable to cross-site scripting XSS attacks. The library does not sanitize the tags in the phpmyfaq/admin/tags.main.php file, allowing a malicious user to inject and execute arbitrary web script...
Cross-site Request Forgery (CSRF)
phpmyfaq is vulnerable to cross-site request forgery CSRF. The library fails to implement any CSRF protection in the phpmyfaq/admin/ajax.config.php file, allowing a malicious user to send a request to create or delete a phpmyfaq instance...
Cross-site request forgery vulnerability in phpMyFaq admin/ajax.config.php file
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
phpMyFaq admin/tags.main.php file cross-site scripting vulnerability
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site scripting vulnerability exists in th...
Cross site request forgery (csrf)
In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php...
CVE-2017-15809
In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag...
CVE-2017-15808
In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php...
Code injection
In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag...
