phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. phpMyFAQ's user removal page allows an attacker to spoof another user's detail, and in turn make a compelling phishing case for removing another user's account. The front-end of this page doesn't....
6.5CVSS
6.3AI Score
0.0005EPSS
phpMyFAQ is an Open Source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The 'sharing FAQ' functionality allows any unauthenticated actor to misuse the phpMyFAQ application to send arbitrary emails to a large range of targets. The phpMyFAQ application has a...
6.5CVSS
6.5AI Score
0.0005EPSS
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Unsafe echo of filename in phpMyFAQ\phpmyfaq\admin\attachments.php leads to allowed execution of JavaScript code in client side (XSS). This vulnerability has been patched in version...
6.5CVSS
6.3AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
5.4CVSS
5.2AI Score
0.0004EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
5.4CVSS
5.2AI Score
0.0004EPSS
phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct...
6.7AI Score
0.059EPSS
8.3CVSS
4.5AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
8.3CVSS
5.2AI Score
0.001EPSS
8.8CVSS
8.6AI Score
0.001EPSS
Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to...
8.4CVSS
4.8AI Score
0.001EPSS
6.3CVSS
5.6AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
5.4CVSS
5.4AI Score
0.001EPSS
8.8CVSS
8.6AI Score
0.001EPSS
6.5CVSS
5.6AI Score
0.001EPSS
Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to...
8.1CVSS
5.2AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
8.3CVSS
5.2AI Score
0.001EPSS
Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to...
9.8CVSS
9.4AI Score
0.002EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
6.3CVSS
5.4AI Score
0.001EPSS
9.8CVSS
9.4AI Score
0.002EPSS
9.8CVSS
9.6AI Score
0.002EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
5.4CVSS
5.4AI Score
0.001EPSS
9.8CVSS
9.6AI Score
0.001EPSS
9.8CVSS
8.5AI Score
0.001EPSS
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to...
5.7CVSS
5.6AI Score
0.0005EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
4.8CVSS
5.1AI Score
0.0004EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
5.4CVSS
5AI Score
0.0004EPSS
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to...
6.1CVSS
6.1AI Score
0.0005EPSS
6.1CVSS
6.1AI Score
0.0005EPSS
6.1CVSS
6.1AI Score
0.0005EPSS
Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to...
9.8CVSS
7.8AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
5.4CVSS
5.4AI Score
0.0004EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
5.4CVSS
5.4AI Score
0.0004EPSS
Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to...
9.8CVSS
9.1AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
5.4CVSS
5.4AI Score
0.0004EPSS
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to...
4.8CVSS
4.9AI Score
0.001EPSS
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to...
7.5CVSS
7.4AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
6.1CVSS
5.8AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
6.1CVSS
5.9AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
5.4CVSS
5.4AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
5.4CVSS
5.4AI Score
0.001EPSS
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to...
4.8CVSS
5.5AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
4.8CVSS
5.9AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
5.4CVSS
5.7AI Score
0.001EPSS
9.8CVSS
7.8AI Score
0.002EPSS
Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to...
4.7CVSS
5AI Score
0.001EPSS
5.4CVSS
5.7AI Score
0.001EPSS
4.3CVSS
5.8AI Score
0.001EPSS
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository thorsten/phpmyfaq prior to...
5.4CVSS
6.7AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...
5.4CVSS
6.1AI Score
0.001EPSS
Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to...
6.1CVSS
5.3AI Score
0.001EPSS