2545 matches found
CVE-2023-1758
CVE-2023-1758 affects thorsten/phpmyfaq (phpMyFAQ) prior to version 3.1.12. The issue is a failure to sanitize special elements into a different plane, which enables stored cross-site scripting (XSS) via the FAQ comment username parameter. The vulnerability is documented by multiple sources (GitH...
phpMyFAQ 访问控制错误漏洞
phpMyFAQ is a multilingual, fully database-driven FAQ system by the individual developer Thorsten Rinne. An Access Control Error vulnerability exists in versions prior to phpMyFAQ 3.1.12, which stems from improper access control...
phpMyFAQ 跨站脚本漏洞
phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.12, which stems from the presence of a stored cross-site scripting XSS vulnerability...
CVE-2023-1879 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1879 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
phpMyFAQ 跨站脚本漏洞
phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.12, which stems from the presence of a reflected cross-site scripting XSS vulnerability...
PT-2023-17306 · Thorsten · Phpmyfaq
Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.12 Description: The issue is related to stored Cross-site Scripting XSS due to the failure to sanitize user input in the adminlog. This has been fixed in version 3.1.12. Recommendations: For versions...
PT-2023-17217
Name of the Vulnerable Software and Affected Versions thorsten/phpmyfaq versions prior to 3.1.12 Description The issue is related to stored Cross-site Scripting XSS due to the failure to sanitize user input in the FAQ News link parameter. This allows for the storage of malicious scripts that can ...
PT-2023-17218
Name of the Vulnerable Software and Affected Versions thorsten/phpmyfaq versions prior to 3.1.12 Description The issue is related to a failure to sanitize special elements, which can lead to stored cross-site scripting XSS due to insufficient sanitization of user input in the FAQ comment username...
CVE-2023-1756
CVE-2023-1756 affects the PHPMyFAQ project by a stored XSS flaw in thorsten/phpmyfaq versions prior to 3.1.12, arising from unsanitized user input during HTML export. The issue is documented as a stored XSS vulnerability and is specifically tied to the HTML export feature, with fixed remediation ...
CVE-2023-1882: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
phpMyFAQ 跨站脚本漏洞
phpMyFAQ is a multi-language, fully database-driven FAQ system by Thorsten Rinne, a personal developer. A cross-site scripting vulnerability exists in phpMyFAQ. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...
CVE-2023-1882 Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq
Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1882
thorsten/phpmyfaq before version 3.1.12 is vulnerable to DOM-based XSS caused by unsanitized input in the configuration privacy note URL parameter. This has been fixed in 3.1.12. Affected scope: software prior to 3.1.12; impact is client-side code execution via the DOM. Remediation: upgrade to 3....
CVE-2023-1886 Authentication Bypass by Capture-replay in thorsten/phpmyfaq
Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1878
The CVE-2023-1878 issue concerns thorsten/phpmyfaq versions prior to 3.1.12, where a stored XSS vulnerability exists in the adminlog due to unsanitized input. Exploitation could allow an attacker to execute script in a victim’s browser when adminlog data is viewed. The vulnerability is fixed in v...
CVE-2023-1886: Authentication Bypass by Capture-replay
Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1880: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1758: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.12...