1986 matches found
CVE-2017-15808
In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php...
CVE-2017-15808
CVE-2017-15808 concerns phpMyFAQ prior to 2.9.9, where a cross‑site request forgery (CSRF) vulnerability exists in the admin/ajax.config.php endpoint. The included connected documents consistently describe a CSRF flaw in this file, enabling an attacker to trigger unauthorized operations from an a...
Cross-site Request Forgery (CSRF)
phpmyfaq is vulnerable to cross-site request forgery CSRF attacks. The application does not have CSRF protection for the phpmyfaq/admin/glossary.main.php file, allowing a malicious user to pass a request to the application to overwrite the current glossary...
Cross-site Request Forgery (CSRF)
phpmyfaq/phpmyfaq is vulnerable to cross-site request forgery CSRF attacks. The application does not have CSRF protection for the phpmyfaq/admin/stat.main.php file, allowing a malicious user to send a request to the application to clear the visits value on the stat page...
Cross-site Request Forgery (CSRF)
phpmyfaq/phpmyfaq is vulnerable to cross-site request forgery CSRF attacks. The library does not have CSRF protection for the phpmyfaq/admin/ajax.attachment.php and phpmyfaq/admin/att.main.php files, allowing a malicious user to send a request to the application to delete attachments...
Cross-site Request Forgery (CSRF)
phpmyfaq is vulnerable to cross-site request forgery CSRF attacks. The library is missing CSRF protection in the phpmyfaq/admin/news.php file, allowing a malicious user to send a request to delete a news entry...
Cross-site Request Forgery (CSRF)
phpmyfaq is vulnerable to cross-site request forgery CSRF attacks. The application does not have any CSRF protections for the phpmyfaq/admin/stat.adminlog.php file, allowing a malicious user to send a request to delete the admin log...
Cross-site Request Forgery (CSRF)
phpmyfaq is vulnerable to cross-site request forgery CSRF attacks. The application does not implement any CSRF protections in the phpmyfaq/admin/stat.ratings.php file, allowing a malicious user to send an unauthorized request to modify the information presented...
Cross-Site Request Forgery (CSRF)
phpmyfaq is vulnerable to cross-site request forgery CSRF attacks. The application has no CSRF protections when adding a glossary, allowing a malicious user to send a request to edit the glossary...
Cross-site Scripting (XSS)
phpmyfaq is vulnerable to cross-site scripting XSS attacks. The application does not sanitize the metaDescription and metaKeyword values, allowing a malicious user to inject and execute arbitrary web script...
Cross-site Scripting (XSS)
phpmyfaq is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script by uploading a HTML file to the application...
phpMyFAQ cross-site scripting vulnerability (CNVD-2017-33504)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site scripting vulnerability exists in...
phpMyFAQ admin/news.php file cross-site request forgery vulnerability
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-33499)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
phpMyFAQ cross-site scripting vulnerability (CNVD-2017-33503)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site scripting vulnerability exists in...
phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-32428)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
Cross-site request forgery vulnerability in phpMyFAQ admin/stat.ratings.php file
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
Cross-site request forgery vulnerability in phpMyFAQ admin/stat.adminlog.php file
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-33507)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-33502)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...