Lucene search
K

1764 matches found

OSV
OSV
added 2023/05/05 9:31 p.m.11 views

GHSA-5MF7-P346-7RM8 Cross Site Scripting in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to version 3.1.13...

8.2CVSS5.1AI score0.0023EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2023/05/05 9:31 p.m.23 views

Cross Site Scripting in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to version 3.1.13...

8.2CVSS5.1AI score0.0023EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2023/05/05 8:15 p.m.11 views

CVE-2023-2550

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

8.2CVSS5.7AI score0.0023EPSS
Exploits1References2
Prion
Prion
added 2023/05/05 8:15 p.m.9 views

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

6.4CVSS4.9AI score0.0023EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2023/05/05 7:15 p.m.10 views

CVE-2023-2427

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

6.1CVSS5.2AI score0.00243EPSS
Exploits1References2
Prion
Prion
added 2023/05/05 7:15 p.m.13 views

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

5.8CVSS4.9AI score0.00243EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2023/05/05 12:0 a.m.149 views

CVE-2023-2550

CVE-2023-2550 describes a stored Cross-site Scripting (XSS) vulnerability in the PHPMyFAQ project prior to version 3.1.13. The vulnerability arises from unfiltered user input stored and later displayed, with multiple sources explicitly stating XSS in thorsten/phpmyfaq before 3.1.13. Public adviso...

8.2CVSS5.2AI score0.0023EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2023/05/05 12:0 a.m.14 views

CVE-2023-2550 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

8.2CVSS7.2AI score0.0023EPSS
Exploits1References4
Cvelist
Cvelist
added 2023/05/05 12:0 a.m.14 views

CVE-2023-2550 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

8.2CVSS5.5AI score0.0023EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/05/05 12:0 a.m.7 views

CVE-2023-2550 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

8.2CVSS5.2AI score0.0023EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/05/05 12:0 a.m.1 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system from the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.1.13, which stems from a stored XSS vulnerability in PhpMyFaq where the mail parameter accepts unfiltered user...

8.2CVSS6.2AI score0.0023EPSS
Exploits1References3
CVE
CVE
added 2023/05/05 12:0 a.m.154 views

CVE-2023-2427

The CVE-2023-2427 vulnerability affects phpMyFAQ (Thorsten Rinne) prior to version 3.1.13 and is a reflected Cross-site Scripting (XSS) flaw. Attackers could leverage reflected input to execute script in a user’s browser, with potential cookie access as indicated by multiple sources. The only fix...

6.1CVSS5.1AI score0.00243EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2023/05/05 12:0 a.m.14 views

CVE-2023-2427 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

6.1CVSS6.5AI score0.00243EPSS
Exploits1References4
Cvelist
Cvelist
added 2023/05/05 12:0 a.m.12 views

CVE-2023-2427 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

6.1CVSS5.5AI score0.00243EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/05/05 12:0 a.m.1 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.1.13, which can be exploited by attackers to steal user cookies...

6.1CVSS6.1AI score0.00243EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/05/05 12:0 a.m.8 views

CVE-2023-2427 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

6.1CVSS5.2AI score0.00243EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/05/04 12:0 a.m.17 views

phpmyFAQ < 3.2.0-beta.2 XSS Vulnerability

phpMyFAQ is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyfaq:phpmyfaq"...

5.2CVSS5.2AI score0.00183EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2023/05/04 12:0 a.m.15 views

phpMyFAQ < 3.1.13 Multiple Vulnerabilities

phpMyFAQ is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyfaq:phpmyfaq"; if description...

9.8CVSS6.9AI score0.00514EPSS
Exploits2References4
Packet Storm
Packet Storm
added 2023/05/03 12:0 a.m.288 views

phpMyFAQ 3.1.12 CSV Injection

Exploit Title: phpMyFAQ v3.1.12 - CSV Injection Application: phpMyFAQ Version: 3.1.12 Bugs: CSV Injection Technology: PHP Vendor URL: https://www.phpmyfaq.de/ Software Link: https://download.phpmyfaq.de/phpMyFAQ-3.1.12.zip Date of found: 21.04.2023 Author: Mirabbas Ağalarov Tested on: Windows 2...

6.9AI score
Exploits0
Huntr
Huntr
added 2023/05/02 9:55 a.m.20 views

Stored XSS bypass in "FAQ"

Description Stored XSS in "Add new FAQ" feature via inject XSS payload in the answer at the following https://roy.demo.phpmyfaq.de/admin/?action=editentry Steps 1- Login as admin and Go to the following URL https://roy.demo.phpmyfaq.de/admin/?action=editentry to add a new faq 2-Enter the "Questio...

5.8CVSS6.6AI score0.00362EPSS
Exploits0
Rows per page
Query Builder