2727 matches found
phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-32428)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-33507)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
Cross-site request forgery vulnerability in phpMyFAQ admin/stat.adminlog.php file
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-33499)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
CVE-2017-15809: Improper Neutralization of Input During Web Page Generation
In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag...
CVE-2017-15808: Cross-Site Request Forgery (CSRF)
In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php...
phpMyFAQ cross-site scripting vulnerability (CNVD-2017-33503)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site scripting vulnerability exists in...
PT-2017-14238
Name of the Vulnerable Software and Affected Versions phpMyFaq versions prior to 2.9.9 Description The issue concerns a CSRF problem. It affects the admin/ajax.config.php file. Recommendations For versions prior to 2.9.9, update to version 2.9.9 or later to resolve the issue. As a temporary...
phpMyFAQ cross-site scripting vulnerability (CNVD-2017-33504)
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site scripting vulnerability exists in...
Cross-site request forgery vulnerability in phpMyFAQ admin/stat.ratings.php file
phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...
Cross site request forgery (csrf)
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/stat.adminlog.php...
CVE-2017-15730
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/stat.ratings.php...
CVE-2017-15727
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting XSS via an HTML attachment...
CVE-2017-15731
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/stat.adminlog.php...
CVE-2017-15729
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for adding a glossary...
CVE-2017-15733
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/ajax.attachment.php and admin/att.main.php...
CVE-2017-15729
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for adding a glossary...
CVE-2017-15732
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/news.php...