Lucene search
+L

2553 matches found

OSV
OSV
•added 2023/02/12 12:00 a.m.•32 views

CVE-2023-0790 Uncaught Exception in thorsten/phpmyfaq

Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

7.6CVSS8.8AI score
SaveExploits0References4
Veracode
Veracode
•added 2023/01/29 6:41 a.m.•30 views

Cross-site Scripting (XSS)

phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to missing conversions of HTML entities in the library, allowing an attacker to inject and execute malicious JavaScript...

5.4CVSS5.4AI score0.00401EPSS
SaveExploits0References3Affected Software2
Veracode
Veracode
•added 2023/01/29 6:15 a.m.•26 views

Cross-site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to missing checks on redirect values in index.php, allowing an attacker to inject and execute malicious JavaScript...

6.1CVSS6AI score0.00513EPSS
SaveExploits0References4Affected Software2
Veracode
Veracode
•added 2023/01/27 8:03 a.m.•32 views

Cross-Site Scripting (XSS)

phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to improper user input sanitization in add.php which allows an attacker to inject and execute arbitrary scripts...

6.1CVSS6AI score0.00562EPSS
SaveExploits0References3Affected Software2
Veracode
Veracode
•added 2023/01/26 8:34 a.m.•22 views

Cross-Site Scripting (XSS)

phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to improper sanitization of user inputs in index.php which allows an attacker to inject and execute arbitrary JavaScript...

5.4CVSS5.5AI score0.00487EPSS
SaveExploits0References3Affected Software2
Veracode
Veracode
•added 2023/01/26 6:14 a.m.•25 views

Cross-Site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper user input sanitization in record.comments.php which allows an attacker to inject and execute arbitrary scripts...

5.4CVSS5.5AI score0.00546EPSS
SaveExploits0References4Affected Software2
Veracode
Veracode
•added 2023/01/26 5:17 a.m.•22 views

Cross-site Scripting (XSS)

phpmyfaq is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end in header.php, which allows an attacker to inject and execute malicious JavaScript...

5.4CVSS5.2AI score0.00487EPSS
SaveExploits0References3Affected Software2
Veracode
Veracode
•added 2023/01/24 1:29 a.m.•21 views

Cross-site Scripting (XSS)

phpmyfaq is vulnerable to Cross-Site ScriptingXSS attacks. The library does not properly escape the user input before converting to HTML entities, which allows an attacker to inject and execute malicious code on the target system...

5.4CVSS5.7AI score0.00541EPSS
SaveExploits0References4Affected Software2
Tenable Nessus
Tenable Nessus
•added 2023/01/20 12:00 a.m.•16 views

FreeBSD : phpmyfaq -- multiple vulnerabilities (005dfb48-990d-11ed-b9d3-589cfc0f81b0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 005dfb48-990d-11ed-b9d3-589cfc0f81b0 advisory. - phpmyfaq developers report: phpMyFAQ does not implement sufficient checks to avoid a stored XSS in Ad...

5.5AI score
SaveExploits0References10
Github Security Blog
Github Security Blog
•added 2023/01/16 12:30 a.m.•37 views

phpMyFAQ Stored Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

9.1CVSS5.2AI score0.00541EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
•added 2023/01/16 12:30 a.m.•33 views

phpMyFAQ Stored Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

7.6CVSS5.2AI score0.00487EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
•added 2023/01/16 12:30 a.m.•40 views

phpMyFAQ has Weak Password Requirements

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

9.8CVSS9AI score0.00643EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2023/01/16 12:30 a.m.•19 views

GHSA-W475-749H-C77M phpMyFAQ Stored Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

5.4CVSS5.4AI score0.00487EPSS
SaveExploits0References4
OSV
OSV
•added 2023/01/16 12:30 a.m.•24 views

GHSA-96X6-JF5W-84C5 phpMyFAQ Stored Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

5.4CVSS5.4AI score0.00541EPSS
SaveExploits0References4
OSV
OSV
•added 2023/01/16 12:30 a.m.•64 views

GHSA-4P88-CFHQ-F3VG phpMyFAQ has Weak Password Requirements

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

9.8CVSS7.3AI score0.00643EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2023/01/16 12:30 a.m.•40 views

phpMyFAQ Improper Authentication vulnerability

Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

9.8CVSS9AI score0.00928EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2023/01/16 12:30 a.m.•29 views

GHSA-M9XR-8CX7-53PJ phpMyFAQ Reflected Cross-site Scripting vulnerability

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

6.1CVSS6.1AI score0.00513EPSS
SaveExploits0References4
OSV
OSV
•added 2023/01/16 12:30 a.m.•28 views

GHSA-9JFF-8XMM-MW22 phpMyFAQ Stored Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

5.4CVSS5.4AI score0.00546EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2023/01/16 12:30 a.m.•53 views

thorsten/phpmyfaq is vulnerable to cross-site scripting (XSS)

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

8.6CVSS5.8AI score0.00562EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
•added 2023/01/16 12:30 a.m.•46 views

phpMyFAQ Stored Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

8.6CVSS5.2AI score0.00487EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder