2542 matches found
CVE-2023-0880: Misinterpretation of Input
Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0880
Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0880 Misinterpretation of Input in thorsten/phpmyfaq
Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0880
CVE-2023-0880 concerns phpMyFAQ prior to 3.1.11, where misinterpretation of input in the thorsten/phpmyfaq GitHub repository is identified as the underlying issue. Affected software: phpMyFAQ versions before 3.1.11. Root cause: improper handling/misinterpretation of user input in the repository. ...
Stored XSS in the adminlog functionality.
Description There is a stored XSS in the 'adminlog' functionality. E.g. the page http://phpmyfaq.local/admin/?action=adminlog shows failed login attempts. If a user with the username 'alert1;' tries to log in, it gets logged and displayed on the adminlog unsanitized. Proof of Concept 1. visit...
phpMyFAQ Cross-Site Scripting Vulnerability (CNVD-2023-09628)
phpMyFAQ is a multilingual, fully database-driven FAQ system. phpMyFAQ versions prior to 3.1.11 are vulnerable to a cross-site scripting vulnerability that originates from cross-site scripting XSS. No detailed vulnerability details are currently available...
phpMyFAQ Cross-Site Scripting Vulnerability (CNVD-2023-09630)
phpMyFAQ is a multilingual, fully database-driven FAQ system. phpMyFAQ versions prior to 3.1.11 are vulnerable to a cross-site scripting vulnerability that originates from cross-site scripting XSS. No detailed vulnerability details are currently available...
phpMyFAQ Code Injection Vulnerability (CNVD-2023-09631)
phpMyFAQ is a multilingual, fully database-driven FAQ system. phpMyFAQ versions prior to 3.1.11 contain a code injection vulnerability that stems from code injection. No detailed vulnerability details are currently available...
phpMyFAQ command injection vulnerability
phpMyFAQ is a multilingual, fully database-driven FAQ system. phpMyFAQ versions prior to 3.1.11 contain a command injection vulnerability, which stems from command injection. No detailed vulnerability details are currently available...
phpMyFAQ Cross-Site Scripting Vulnerability (CNVD-2023-09633)
phpMyFAQ is a multilingual, fully database-driven FAQ system. phpMyFAQ versions prior to 3.1.11 are vulnerable to a cross-site scripting vulnerability that stems from stored cross-site scripting XSS. No detailed vulnerability details are currently available...
phpMyFAQ has an unspecified vulnerability (CNVD-2023-09634)
phpMyFAQ is a multilingual, fully database-driven FAQ system. phpMyFAQ versions prior to 3.1.11 contain a security vulnerability that stems from an uncaught exception. No detailed vulnerability details are currently available...
phpMyFAQ has an unspecified vulnerability (CNVD-2023-09635)
phpMyFAQ is a multilingual, fully database-driven FAQ system. phpMyFAQ versions prior to 3.1.11 have a security vulnerability that stems from a weak password requirement. No detailed vulnerability details are currently available...
phpMyFAQ code injection vulnerability
phpMyFAQ is a multilingual, fully database-driven FAQ system. phpMyFAQ versions prior to 3.1.11 contain a code injection vulnerability that stems from code injection. No detailed vulnerability details are currently available...
phpMyFAQ < 3.1.11 Multiple Vulnerabilities
phpMyFAQ is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyfaq:phpmyfaq"; if description...
GHSA-WJRJ-JC3W-PPFW Code Injection in thorsten/phpmyfaq
Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
GHSA-JFPG-JGGF-RPPH Cross-site Scripting in thorsten/phpmyfaq
Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
Cross-site Scripting in thorsten/phpmyfaq
Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
Command Injection in thorsten/phpmyfaq
Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...