464 matches found
PT-2023-16535
Name of the Vulnerable Software and Affected Versions thorsten/phpmyfaq versions prior to 3.1.11 Description The issue is related to Cross-site Scripting XSS - Stored, which affects the thorsten/phpmyfaq GitHub repository. Recommendations For versions prior to 3.1.11, update to version 3.1.11 or...
CVE-2023-0794: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0794
CVE-2023-0794 is a Cross-site Scripting (XSS) vulnerability described as stored in the GitHub project thorsten/phpmyfaq, affecting versions prior to 3.1.11. The connected documents consistently identify this XSS issue across multiple feeds (NVD, Red Hat, OSV, GHSA, CNVD, etc.). They do not provid...
CVE-2023-0789: Improper Neutralization of Special Elements used in a Command
Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0792: Improper Control of Generation of Code
Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0787 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq
Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0791
CVE-2023-0791 affects phpMyFAQ prior to 3.1.11 with a stored XSS vulnerability. Multiple connected sources (NVD, CNVD, GHSA, OSV, CNNVD, CVE listing) confirm a stored XSS in this version range. Remediation is to upgrade to 3.1.11 or later, as indicated by multiple references.
CVE-2023-0788: Improper Control of Generation of Code
Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0789
CVE-2023-0789 affects thorsten/phpMyFAQ prior to 3.1.11. It is a reported command injection vulnerability in the web application. Public databases assign a high/critical severity: NVD lists CVSS v3.1 base score 9.8 (CRITICAL) with network access, no user interaction, and full impact on confidenti...
CVE-2023-0787
CVE-2023-0787 affects phpMyFAQ (thorsten/phpmyfaq) prior to version 3.1.11. The issue is a Cross-site Scripting (XSS) vulnerability originating from the application, with the vulnerability described as generic XSS in multiple sources (CVE entry, OSV, CNVD, GHSA). The root cause details are not el...
CVE-2023-0786
CVE-2023-0786 describes a Cross-site Scripting (XSS) vulnerability in the PHP/MyFAQ project thorsten/phpmyfaq prior to version 3.1.11. The affected software is thorsten/phpmyfaq; the issue is identified as XSS. Remediation suggested by the connected records is to upgrade to 3.1.11 or later. Other...
CVE-2023-0794 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0786 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq
Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
CVE-2023-0791: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11...
Cross-site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to missing checks on redirect values in index.php, allowing an attacker to inject and execute malicious JavaScript...
Cross-Site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper user input sanitization in record.comments.php which allows an attacker to inject and execute arbitrary scripts...
thorsten/phpmyfaq is vulnerable to cross-site scripting (XSS)
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...
phpMyFAQ Cross-Site Scripting Vulnerability (CNVD-2023-04316)
phpMyFAQ is a multilingual, fully database-driven FAQ system by Thorsten Rinne, a personal developer. phpMyFAQ versions prior to 3.1.10 are vulnerable to a cross-site scripting vulnerability that stems from the presence of stored cross-site scripting XSS. No detailed vulnerability details are...
