2352 matches found
Cross-site Scripting (XSS)
phpmyfaq is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script by uploading a HTML file to the application...
phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-33499)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
phpMyFAQ admin/news.php file cross-site request forgery vulnerability
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
phpMyFAQ cross-site scripting vulnerability (CNVD-2017-33504)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site scripting vulnerability exists in...
phpMyFAQ cross-site scripting vulnerability (CNVD-2017-33503)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site scripting vulnerability exists in...
phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-32428)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
CVE-2017-15808: Cross-Site Request Forgery (CSRF)
In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php...
CVE-2017-15809: Improper Neutralization of Input During Web Page Generation
In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag...
Cross-site request forgery vulnerability in phpMyFAQ admin/stat.ratings.php file
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-33502)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-33507)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
Cross-site request forgery vulnerability in phpMyFAQ admin/stat.adminlog.php file
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
CVE-2017-15732
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/news.php...
CVE-2017-15727
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting XSS via an HTML attachment...
CVE-2017-15728
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting XSS via metaDescription or metaKeywords...
CVE-2017-15733
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/ajax.attachment.php and admin/att.main.php...
CVE-2017-15735
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for modifying a glossary...
CVE-2017-15732
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/news.php...
