phpMyFAQ 2.8.x - Multiple Vulnerabilities

Title: phpMyFAQ 2.8.X - Multiple Vulnerabilities Vendor: phpmyfaq.de Date: 04.09.19 Version: = 2.8.12 Latest ATM Tested on: Apache 2.2 / PHP 5.4 / Linux Contact: smash at devilteam.pl 1 Persistent XSS Administrator is able to view information about specific user session in 'Statistic' tab. Over...

phpMyFAQ 2.8.x - Multiple Vulnerabilities

phpMyFAQ 2.8.x - Multiple Vulnerabilities Title: phpMyFAQ 2.8.X - Multiple Vulnerabilities Vendor: phpmyfaq.de Date: 04.09.19 Version: = 2.8.12 Latest ATM Tested on: Apache 2.2 / PHP 5.4 / Linux Contact: smash at devilteam.pl 1 Persistent XSS Administrator is able to view information about specif...

phpMyFAQ 2.8.X - Multiple Vulnerabilities

Latest phpMyFAQ software suffers on multiple CSRF and XSS vulnerabilities, uh. Title: phpMyFAQ 2.8.X - Multiple Vulnerabilities Vendor: phpmyfaq.de Date: 04.09.19 Version: = 2.8.12 Latest ATM Tested on: Apache 2.2 / PHP 5.4 / Linux Contact: smash at devilteam.pl 1 Persistent XSS Administrator is...

PHPMyFAQ 1.5.1 Password.PHP SQL Injection Vulnerabililty

No description provided by source. source: http://www.securityfocus.com/bid/14927/info phpMyFAQ is affected by an SQL injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input before using it in a SQL query. This vulnerability could permit remo...

phpMyFAQ 2.5.4 and Prior Multiple Cross Site Scripting Vulnerabilities

漏洞信息： phpMyFAQ是一个多语言，完全数据库驱动的FAQ系统。它支持多种数据库来存储所有数据。 phpMyFAQ的脚本index.php中存在多个跨站脚本攻击漏洞。 漏洞影响： phpMyFAQ phpMyFAQ 2.5.4 phpMyFAQ phpMyFAQ 2.5.2 phpMyFAQ phpMyFAQ 2.5.1 phpMyFAQ phpMyFAQ 2.5 -dev phpMyFAQ phpMyFAQ 2.5 漏洞分析：...

phpMyFAQ <= 1.5.1 (User-Agent) Remote Shell Injection Exploit

No description provided by source. ?php 17.34 22/09/2005 phpmyfaqxpl.php PhpMyFaq 1.5.1 possibly prior versions shell inject by rgod site: http://rgod.altervista.org make these changes in your php.ini if you have troubles to launch this script: allowcalltimepassreference = on registerglobals = on...

PHPMyFAQ 1.5.1 - Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14929/info PHPMyFAQ is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

PHPMyFAQ 1.5.1 Logs Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14930/info PHPMyFAQ is prone to an unauthorized access vulnerability. A remote attacker can exploit this vulnerability to view the application log file. This vulnerability could lead to the disclosure of various valid...

phpMyFAQ <= 2.7.0 (ajax_create_folder.php) Remote Code Execution

No description provided by source. ?php / ------------------------------------------------------------------------ phpMyFAQ = 2.7.0 ajaxcreatefolder.php Remote Code Execution Exploit ------------------------------------------------------------------------ author............: Egidio Romano aka Egi...

phpMyFAQ <= 1.6.7 - Remote SQL Injection / Command Execution Exploit

No description provided by source. !/usr/bin/php5-cgi -q ? / Sql injection / remote command execution exploit for phpmyfaq 1.6.8 Bugtraq: http://www.securityfocus.com/bid/21944 CVS:...

PHPMyFAQ 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/14928/info PHPMyFAQ is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

CVE-2014-0814

Cross-site scripting XSS vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to hijack the authentication of arbitrary users for requests that modify settings...

Cross site scripting

Cross-site scripting XSS vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0813

Affected software : phpMyFAQ (before 2.8.6). Vulnerability : Cross-site request forgery (CSRF) in the web interface that lets an attacker hijack the authentication of an arbitrary user to modify settings. Root cause / details : The issue is a CSRF vulnerability allowing a malicious page to trigge...

CVE-2014-0813

Cross-site request forgery CSRF vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to hijack the authentication of arbitrary users for requests that modify settings...

CVE-2014-0814

CVE-2014-0814 describes a cross-site scripting vulnerability in phpMyFAQ before 2.8.6. The issue allows remote attackers to inject arbitrary web script or HTML through unspecified vectors, due to insufficient input sanitization in the affected software. The vulnerability affects versions 2.8.5 an...

CVE-2014-0814

Cross-site scripting XSS vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0813: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to hijack the authentication of arbitrary users for requests that modify settings...

CVE-2014-0814: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...