WS-2022-0338

A stored XSS and possible RCE/LFI in case of misconfiguration in thorsten/phpmyfaq. An attacker with admin grant can export the configuration and re-upload the same file bypassing all the backend sanitization and controls. This vulnerability allow an attacker to take control of the entire databas...

WS-2022-0341

Cross-Site Request Forgery CSRF in thorsten/phpmyfaq. An attacker is able to log out a user if a logged-in user visits the attacker's website...

WS-2022-0183

Stored XSS via Editing config in thorsten/phpmyfaq prior to 3.1.6...

EUVD-2023-0645

Malicious code in bioql PyPI...

EUVD-2023-0687

Malicious code in bioql PyPI...

EUVD-2023-0811

Malicious code in bioql PyPI...

EUVD-2023-1476

Malicious code in bioql PyPI...

EUVD-2023-0868

Malicious code in bioql PyPI...

EUVD-2023-1017

Malicious code in bioql PyPI...

EUVD-2023-1037

Malicious code in bioql PyPI...

EUVD-2023-0872

Malicious code in bioql PyPI...

EUVD-2023-0901

Malicious code in bioql PyPI...

EUVD-2023-1345

Malicious code in bioql PyPI...

EUVD-2023-1306

Malicious code in bioql PyPI...

EUVD-2023-1164

Malicious code in bioql PyPI...

EUVD-2023-1269

Malicious code in bioql PyPI...

EUVD-2023-1478

Malicious code in bioql PyPI...

EUVD-2023-1387

Malicious code in bioql PyPI...

EUVD-2023-0707

Malicious code in bioql PyPI...

EUVD-2023-0703

Malicious code in bioql PyPI...