226 matches found
CVE-2023-0793 Weak Password Requirements in thorsten/phpmyfaq
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0790 Uncaught Exception in thorsten/phpmyfaq
Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0790 Uncaught Exception in thorsten/phpmyfaq
Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0788 Code Injection in thorsten/phpmyfaq
Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0793 Weak Password Requirements in thorsten/phpmyfaq
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0788 Code Injection in thorsten/phpmyfaq
Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0792 Code Injection in thorsten/phpmyfaq
Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0787 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq
Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0786 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq
Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0794 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0786 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq
Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0789
CVE-2023-0789 affects thorsten/phpMyFAQ prior to 3.1.11. It is a reported command injection vulnerability in the web application. Public databases assign a high/critical severity: NVD lists CVSS v3.1 base score 9.8 (CRITICAL) with network access, no user interaction, and full impact on confidenti...
CVE-2023-0786
CVE-2023-0786 describes a Cross-site Scripting (XSS) vulnerability in the PHP/MyFAQ project thorsten/phpmyfaq prior to version 3.1.11. The affected software is thorsten/phpmyfaq; the issue is identified as XSS. Remediation suggested by the connected records is to upgrade to 3.1.11 or later. Other...
Cross-site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to missing checks on redirect values in index.php, allowing an attacker to inject and execute malicious JavaScript...
Cross-Site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper user input sanitization in record.comments.php which allows an attacker to inject and execute arbitrary scripts...
CVE-2023-0312 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...
CVE-2023-0310 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...
CVE-2023-0307 Weak Password Requirements in thorsten/phpmyfaq
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...
CVE-2023-0311 Improper Authentication in thorsten/phpmyfaq
Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10...
PT-2023-16165 · Unknown · Thorsten/Phpmyfaq
Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts...