Phpmyfaq Security Vulnerabilities

CVE-2024-22202

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. phpMyFAQ's user removal page allows an attacker to spoof another user's detail, and in turn make a compelling phishing case for removing another user's account. The front-end of this page doesn't....

CVE-2024-22208

phpMyFAQ is an Open Source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The 'sharing FAQ' functionality allows any unauthenticated actor to misuse the phpMyFAQ application to send arbitrary emails to a large range of targets. The phpMyFAQ application has a...

CVE-2024-24574

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Unsafe echo of filename in phpMyFAQ\phpmyfaq\admin\attachments.php leads to allowed execution of JavaScript code in client side (XSS). This vulnerability has been patched in version...

CVE-2023-6889

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-6890

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2004-2257

phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct...

CVE-2023-0880

Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0791

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0790

Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0786

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1761

Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1886

Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1885

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1753

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0788

Code Injection in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1756

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0792

Code Injection in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0793

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0787

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0794

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1875

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0789

Command Injection in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-5865

Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-5866

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-5864

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-5867

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-5863

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-5320

Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-5316

Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-5227

Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-5317

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-5319

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-4006

Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-4007

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-3469

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to...

CVE-2022-4409

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-2998

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-2999

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-2753

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-2752

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-2427

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-2550

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-2428

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-2429

Improper Access Control in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1754

Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1883

Improper Access Control in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1887

Business Logic Errors in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1758

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1878

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1884

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to...