1988 matches found
CVE-2023-1884
CVE-2023-1884 affects thorsten/phpmyfaq prior to version 3.1.12, with a cross-site scripting (XSS) vulnerability in the stopword parameter due to insufficient input sanitization. The issue is fixed in 3.1.12. Affected versions: before 3.1.12; impact is XSS as described in multiple sources (GHSA e...
phpMyFAQ 安全漏洞
phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A security vulnerability exists in phpMyFAQ. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...
CVE-2023-1882 Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq
Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1883 Improper Access Control in thorsten/phpmyfaq
Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1879 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
phpMyFAQ < 3.1.12 Multiple Vulnerabilities
phpMyFAQ is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyfaq:phpmyfaq"; if description...
Multiple Stored XSS via mail parameter
Description In PhpMyFaq, while submitting a question, the mail parameter is accepting unsanitized user input which leads to Stored XSS vulnerability, executing on Admin Panel /admin/?action=question. Proof of Concept 1. Go to https://roy.demo.phpmyfaq.de/index.php?action=ask&categoryid=0 1. Fill ...
phpMyFAQ vulnerable to improper input validation
Improper Neutralization of Input During Web Page Generation in phpMyFAQ...
phpMyFAQ has weak password requirements
Weak password requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
GHSA-4P4M-5QP7-479X phpMyFAQ has weak password requirements
Weak password requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
phpMyFAQ Stored Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
phpMyFAQ Cross-site Scripting vulnerability
Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
phpMyFAQ Code Injection vulnerability
Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
GHSA-XWW4-W6FF-5Q3G thorsten/phpmyfaq vulnerable privilege escalation from improper privilege management
thorsten/phpmyfaq prior to 3.1.12 is vulnerable to privilege escalation from improper privilege management. Any user with the ability to add a new user can create a user with super admin rights. This has been fixed in 3.1.12...
GHSA-6CPG-GQGQ-2RRR phpMyFAQ Code Injection vulnerability
Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1759
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1760
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
CVE-2023-1761
Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12...
