Lucene search
+L

12 matches found

Snyk
Snyk
•added 2026/09/04 12:40 p.m.•9 views

Improper Control of Interaction Frequency

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Improper Control of Interaction Frequency via the store parameter in question submission requests. An attacker can submit unlimited questions without...

6.9CVSS5.8AI score0.00493EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 12:40 p.m.•7 views

Improper Control of Interaction Frequency

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Improper Control of Interaction Frequency via the store parameter in question submission requests. An attacker can submit unlimited questions without...

6.9CVSS5.8AI score0.00493EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/04 11:29 a.m.•40 views

CVE-2026-85586 phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing database pollution and triggering outgoing mail notifications...

6.9CVSS0.00493EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/04 11:29 a.m.•10 views

CVE-2026-85586 phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing database pollution and triggering outgoing mail notifications...

6.9CVSS6AI score0.00493EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/04 11:29 a.m.•13 views

CVE-2026-85586 phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing database pollution and triggering outgoing mail notifications...

6.9CVSS5.5AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•19 views

PT-2026-85486

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing database pollution and triggering outgoing mail notifications...

6.9CVSS6AI score0.00493EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/04 12:00 a.m.•2 views

CVE-2026-85586: Improper Control of Interaction Frequency

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing database pollution and triggering outgoing mail notifications...

6.9CVSS6AI score0.00493EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2010-2470

Malware in sbrugna...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
•added 2025/07/25 12:00 a.m.•18 views

PT-2025-36931

Name of the Vulnerable Software and Affected Versions: Tenda G3 version 3.0br V15.11.0.17 Description: The Tenda G3 version 3.0br V15.11.0.17 contains a stack overflow in the rules parameter within the dns forward rule store function. This issue allows attackers to cause a Denial of Service DoS b...

7.8CVSS6.7AI score0.00489EPSS
SaveExploits1References7
OSV
OSV
•added 2022/05/04 2:15 p.m.•10 views

CVE-2022-28099

Poultry Farm Management System v1.0 was discovered to contain a SQL injection vulnerability via the Item parameter at /farm/store.php...

8.8CVSS7.3AI score0.01626EPSS
SaveExploits1References3
NVD
NVD
•added 2010/06/25 9:30 p.m.•28 views

CVE-2010-2461

SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL commands via the store parameter...

7.5CVSS8.3AI score0.00967EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/06/25 12:00 a.m.•3 views

CVE-2010-2461: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL commands via the store parameter...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References2
Rows per page
Query Builder