CVE-2023-0309

The CVE-2023-0309 entry corresponds to a stored Cross-site Scripting (XSS) vulnerability in phpMyFAQ prior to version 3.1.10. Affected software is phpMyFAQ (thorsten/phpmyfaq) and the issue originates from a stored XSS vector in input processed by the application. The vulnerability is described c...

CVE-2023-0306 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0311 Improper Authentication in thorsten/phpmyfaq

Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0308 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0307 Weak Password Requirements in thorsten/phpmyfaq

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

phpmyfaq -- multiple vulnerabilities

phpmyfaq developers report: phpMyFAQ does not implement sufficient checks to avoid a stored XSS in "Add new question" phpMyFAQ does not implement sufficient checks to avoid a stored XSS in admin user page phpMyFAQ does not implement sufficient checks to avoid a stored XSS in FAQ comments phpMyFAQ...

CVE-2023-0312 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.1.10, which stems from the presence of reflected cross-site scripting XSS. No details of the vulnerability are provided at this time...

phpMyFAQ 安全漏洞

phpMyFAQ is a multilingual, fully database-driven FAQ system by the individual developer Thorsten Rinne. A security vulnerability exists in phpMyFAQ versions prior to 3.1.10, which stems from the presence of weak passwords...

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multilingual, fully database-driven FAQ system. phpMyFAQ versions prior to 3.1.10 are vulnerable to a cross-site scripting vulnerability that stems from the presence of stored cross-site scripting XSS. No detailed vulnerability details are currently available...

CVE-2023-0312 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0307 Weak Password Requirements in thorsten/phpmyfaq

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0314 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0309 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0308 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

PT-2023-16166 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue concerns improper authentication in the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.10, update to version 3.1.10 or later to resolve the iss...

CVE-2023-0314

CVE-2023-0314 describes a reflected Cross-site Scripting (XSS) vulnerability in phpMyFAQ. The affected software is the phpMyFAQ application, with vulnerable versions prior to 3.1.10 (i.e., 3.1.9 and earlier). The description indicates the issue is reflected XSS originating from input processed by...

CVE-2023-0311

CVE-2023-0311 affects phpMyFAQ (thorsten/phpmyfaq) prior to version 3.1.10 due to an improper authentication/authorization issue. The vulnerability is documented with a CVSSv3.1 base score of 9.8 (Network attack, no user interaction, high impact on confidentiality, integrity, and availability). T...

CVE-2023-0310

CVE-2023-0310 is a Stored XSS in phpMyFAQ (thorsten/phpmyfaq) prior to version 3.1.10. Documented across multiple feeds (NVD entry, GHSA/GitHub advisory, OSV, CVE List) consistently state an XSS vulnerability in the repository before 3.1.10. The root cause is a stored XSS issue in the application...

CVE-2023-0307

CVE-2023-0307 affects the PHP-based web app phpMyFAQ (thorsten/phpmyfaq) prior to version 3.1.10. The vulnerability is due to Weak Password Requirements in the repository, allowing weaknesses in authentication policy that can compromise account security. The available public records indicate a hi...