2545 matches found
PT-2023-32383 · Thorsten · Phpmyfaq
Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.2.1 Description: The issue is related to Cross-site Scripting XSS - Stored, which means an attacker can inject malicious scripts into the application, potentially affecting users who access the compromise...
PT-2023-32384 · Phpmyfaq · Phpmyfaq
Name of the Vulnerable Software and Affected Versions: phpmyfaq versions prior to 3.2.2 Description: The issue is related to insufficient session expiration. Recommendations: For versions prior to 3.2.2, update to version 3.2.2 or later to resolve the issue...
phpmyfaq -- multiple vulnerabilities
phpmyfaq developers report: XSS Insufficient session expiration...
CVE-2023-5867: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2...
phpMyFAQ 代码问题漏洞
phpMyFAQ is a multi-language, fully database-driven FAQ system. An access control error vulnerability exists in versions prior to phpMyFAQ 3.2.2, which stems from the presence of insufficient session expiration. An attacker can exploit this vulnerability to still use old sessions...
PT-2023-32382
Name of the Vulnerable Software and Affected Versions thorsten/phpmyfaq versions prior to 3.2.2 Description The issue is related to Cross-site Scripting XSS - Reflected. This means an attacker can inject malicious scripts into a website, which will be executed by the user's browser. Recommendatio...
PT-2023-32385
Name of the Vulnerable Software and Affected Versions phpmyfaq versions prior to 3.2.1 Description The issue concerns a sensitive cookie in an HTTPS session that lacks the 'Secure' attribute. This could potentially allow unauthorized access to session data. Recommendations For versions prior to...
phpMyFAQ 安全漏洞
phpMyFAQ is a multi-language, fully database-driven FAQ system. An information disclosure vulnerability exists in phpMyFAQ versions prior to 3.2.2, which stems from the presence of sensitive cookies in an HTTPS session, and can be exploited by an attacker to obtain sensitive information...
CVE-2023-5866: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1...
CVE-2023-5863: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2...
CVE-2023-5864: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1...
PT-2023-32386
Name of the Vulnerable Software and Affected Versions thorsten/phpmyfaq versions prior to 3.2.2 Description The issue is related to Cross-site Scripting XSS - Stored, which means an attacker can inject malicious scripts into the application. Recommendations For versions prior to 3.2.2, update to...
Cross-Site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross Site Scripting. The vulnerability is due to a lack of url sanitization in instances.php which allow an attacker to pass a malicious URL...
Unrestricted File Upload
thorsten/phpmyfaq is vulnerable to Unrestricted File Upload. The vulnerability is due to the system allowing the upload of arbitrary files without validating the MIME type. An attacker can exploit this issue by uploading malicious files to the server, potentially leading to remote code execution...
Cross Site Scripting
thorsten/phpmyfaq is vulnerable to Cross Site Scripting. The vulnerability is due to improper sanitization of data. This can be exploited by an attacker to inject malicious JavaScript into the web application...
phpMyFAQ < 3.1.18 Multiple Vulnerabilities
phpMyFAQ is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyfaq:phpmyfaq"; if description...
Stored XSS in Attachment File Name
Description A stored cross-site scripting vulnerability exists within the file attachment upload functionality. Replication Steps 0x01. As a user with only the "Edit Record" and "Add Attachments" permissions, the user proceeded to edit a FAQ record and clicked "Add new attachment", as seen in the...
phpMyFAQ allows unrestricted file types in image field
Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.18...
