7 matches found
EUVD-2005-3050
Malware in sbrugna...
EUVD-2017-7151
Malware in sbrugna...
EUVD-2017-7156
Malware in sbrugna...
EUVD-2024-0529
Malicious code in bioql PyPI...
CVE-2024-22202
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. phpMyFAQ's user removal page allows an attacker to spoof another user's detail, and in turn make a compelling phishing case for removing another user's account. The front-end of this page doesn'...
Path Traversal
phpmyfaq is vulnerable to Path Traversal. The vulnerability is due to improper validation / sanitisation on user input file paths. The vulnerability allows attackers with admin rights to upload malicious files to other locations of the web root, resulting in path traversal...
CVE-2005-0702
SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages...