2358 matches found
CVE-2009-4040: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page...
phpMyFAQ搜索页面跨站脚本漏洞
BUGTRAQ ID: 37020 phpMyFAQ是一款多语言、基于数据库的FAQ系统。 phpMyFAQ的搜索页面没有正确地过滤GET变量，远程攻击者可以通过特制的URL请求执行跨站存储式跨站脚本攻击，在出错消息的输出中注入任意HTML代码。这可能导致泄漏域Cookie，如会话标识符。 phpMyFAQ = 2.5.1 厂商补丁： phpMyFAQ -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.phpmyfaq.de/download.php?do=download&number=2.0.17&ext=.zip...
phpMyFAQ Search Page Cross Site Scripting Vulnerability
phpMyFAQ is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...
phpMyFAQ Search Page XSS Vulnerability
phpMyFAQ is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. This VT has been deprecated as a duplicate of the following VT: phpMyFAQ 2.0.17, 2.5.x 2.5.2 XSS Vulnerability OID: 1.3.6.1.4.1.25623.1.0.900982 SPDX-FileCopyrightText...
phpMyFAQ Detection (HTTP)
HTTP based detection of phpMyFAQ. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100106";...
phpMyFAQ Detection
This host is running phpMyFAQ, an open source FAQ system using PHP and available for many databases. OpenVAS Vulnerability Test $Id: phpmyfaqdetect.nasl 5739 2017-03-27 14:48:05Z cfi $ phpMyFAQ Detection Authors: Michael Meyer Updated to detect beta versions. - By Nikita MR on 2009-11-24 11:10:45...
FreeBSD Ports: phpmyfaq
The remote host is missing an update to the system as announced in the referenced advisory. VID c6b9aee8-3071-11da-af18-000ae4641456 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: phpmyfaq
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
phpMyFAQ <= 1.6.7 Remote SQL Injection / Command Execution Exploit
No description provided by source. !/usr/bin/php5-cgi -q " localhost:4001 [email protected] / function doupload$baseurl, $proxy, $cmd $fp = fopen"kebab.php", "w"; if!$fp die"Cannot open file for writing"; $code = "Un1q" . $cmd . ""; fwrite$fp, $code; fclose$fp; $sendvars"aktion" =...
phpMyFAQ <= 1.6.7 Remote SQL Injection / Command Execution Exploit
No description provided by source. !/usr/bin/php5-cgi -q ? / Sql injection / remote command execution exploit for phpmyfaq 1.6.8 Bugtraq: http://www.securityfocus.com/bid/21944 CVS:...
phpMyFAQ <= 1.6.7 Remote SQL Injection / Command Execution Exploit
Exploit for unknown platform in category web applications ================================================================== phpMyFAQ " localhost:4001 email protected / function doupload$baseurl, $proxy, $cmd $fp = fopen"kebab.php", "w"; if!$fp die"Cannot open file for writing"; $code = "Un1q"...
phpMyFAQ 1.6.7 - SQL Injection Command Execution
phpMyFAQ 1.6.7 - SQL Injection Command Execution !/usr/bin/php5-cgi -q " localhost:4001 [email protected] / function doupload$baseurl, $proxy, $cmd $fp = fopen"kebab.php", "w"; if!$fp die"Cannot open file for writing"; $code = "Un1q" . $cmd . ""; fwrite$fp, $code; fclose$fp; $sendvars"aktion"...
phpMyFAQ 1.6.7 - SQL Injection / Command Execution
!/usr/bin/php5-cgi -q " localhost:4001 [email protected] / function doupload$baseurl, $proxy, $cmd $fp = fopen"kebab.php", "w"; if!$fp die"Cannot open file for writing"; $code = "Un1q" . $cmd . ""; fwrite$fp, $code; fclose$fp; $sendvars"aktion" = "save"; $sendvars"uin" = "-1' UNION SELECT...
CVE-2007-1032
Unspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when registerglobals is enabled, allows remote attackers to "gain the privilege for uploading files on the server."...
Code injection
Unspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when registerglobals is enabled, allows remote attackers to "gain the privilege for uploading files on the server."...
CVE-2007-1032
Summary: CVE-2007-1032 affects phpMyFAQ 1.6.9 and earlier. The issue allows a remote attacker to upload files with the web server’s privileges when PHP register_globals is enabled. The vulnerability is triggered via scripts in the admin area (admin/attachment.php and admin/editor/plugins/ImageMan...
CVE-2007-1032
Unspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when registerglobals is enabled, allows remote attackers to "gain the privilege for uploading files on the server."...
CVE-2007-1032: Undefined Security Weakness
Unspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when registerglobals is enabled, allows remote attackers to "gain the privilege for uploading files on the server."...
phpMyFAQ < 1.6.10 Multiple Script Arbitrary File Upload
The installation of phpMyFAQ on the remote host allows for bypassing authentication or escalating privileges via the 'admin/attachment.php' and 'admin/editor/plugins/ImageManager/images.php' scripts. By leveraging these issues, a remote attacker can upload files, possibly even containing arbitrar...
PHPMyFAQ SQL注入漏洞
PHPMyFAQ是一款基于PHP的WEB应用程序。 PHPMyFAQ不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是多个脚本对用户提交的WEB参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 phpMyFAQ 1.6.7 phpMyFAQ phpMyFAQ 1.6.7 phpMyFAQ phpMyFAQ 1.6.8 http://www.phpmyfaq.de/getfaq.php?number=1.6.8&version=full&ext=.zip...