1988 matches found
PT-2023-16531 · Unknown · Thorsten/Phpmyfaq
Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.11 Description: The issue is related to an Uncaught Exception in the GitHub repository thorsten/phpmyfaq. Recommendations: For versions prior to 3.1.11, update to version 3.1.11 or later to resolve the...
phpMyFAQ 代码注入漏洞
phpMyFAQ is a multilingual, fully database-driven FAQ system. phpMyFAQ versions prior to 3.1.11 contain a code injection vulnerability that stems from code injection. No detailed vulnerability details are currently available...
CVE-2023-0787
CVE-2023-0787 affects phpMyFAQ (thorsten/phpmyfaq) prior to version 3.1.11. The issue is a Cross-site Scripting (XSS) vulnerability originating from the application, with the vulnerability described as generic XSS in multiple sources (CVE entry, OSV, CNVD, GHSA). The root cause details are not el...
CVE-2023-0788 Code Injection in thorsten/phpmyfaq
Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0793
In phpMyFAQ, versions prior to 3.1.11 are affected by a weakness in password requirements that can permit weak credentials to be used, as documented across multiple sources. The CVE entry identifies the issue as CVE-2023-0793 with high impact per NVD metrics, but the connected documents do not pr...
phpMyFAQ 安全漏洞
phpMyFAQ is a multilingual, fully database-driven FAQ system. phpMyFAQ versions prior to 3.1.11 have a security vulnerability that stems from a weak password requirement. No detailed vulnerability details are currently available...
CVE-2023-0793 Weak Password Requirements in thorsten/phpmyfaq
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
Cross-site Scripting (XSS)
phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to missing conversions of HTML entities in the library, allowing an attacker to inject and execute malicious JavaScript...
Cross-site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to missing checks on redirect values in index.php, allowing an attacker to inject and execute malicious JavaScript...
Cross-Site Scripting (XSS)
phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to improper user input sanitization in add.php which allows an attacker to inject and execute arbitrary scripts...
Cross-Site Scripting (XSS)
phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to improper sanitization of user inputs in index.php which allows an attacker to inject and execute arbitrary JavaScript...
Cross-Site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper user input sanitization in record.comments.php which allows an attacker to inject and execute arbitrary scripts...
Cross-site Scripting (XSS)
phpmyfaq is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end in header.php, which allows an attacker to inject and execute malicious JavaScript...
Cross-site Scripting (XSS)
phpmyfaq is vulnerable to Cross-Site ScriptingXSS attacks. The library does not properly escape the user input before converting to HTML entities, which allows an attacker to inject and execute malicious code on the target system...
FreeBSD : phpmyfaq -- multiple vulnerabilities (005dfb48-990d-11ed-b9d3-589cfc0f81b0)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 005dfb48-990d-11ed-b9d3-589cfc0f81b0 advisory. - phpmyfaq developers report: phpMyFAQ does not implement sufficient checks to avoid a stored XSS in Ad...
GHSA-4P88-CFHQ-F3VG phpMyFAQ has Weak Password Requirements
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...
phpMyFAQ has Weak Password Requirements
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...
GHSA-W475-749H-C77M phpMyFAQ Stored Cross-site Scripting vulnerability
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...