Phpmyfaq Security Vulnerabilities

CVE-2023-1757

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1878

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1880

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1879

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1762

Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1759

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1755

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-1760

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0314

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0312

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0313

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0307

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0311

Improper Authentication in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0310

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0309

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0308

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2023-0306

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2022-4408

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2022-4407

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to...

CVE-2022-3766

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to...

CVE-2022-3765

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2022-3754

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to...

CVE-2022-3608

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to...

CVE-2009-4780

Multiple cross-site scripting (XSS) vulnerabilities in index.php in phpMyFAQ before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter in a sitemap action, (2) the search parameter in a search action, (3) the tagging_id parameter in a search action, (4).....

CVE-2009-4040

Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search...

CVE-2017-15732

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in...

CVE-2017-15733

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and...

CVE-2017-15734

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in...

CVE-2017-15809

In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted...

CVE-2017-15728

In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via metaDescription or...

CVE-2017-15729

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for adding a...

CVE-2017-15731

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in...

CVE-2017-15735

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a...

CVE-2017-15808

In phpMyFaq before 2.9.9, there is CSRF in...

CVE-2017-11187

phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins...

CVE-2010-4558

phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification (Trojan Horse) in the getTopTen method in inc/Faq.php, which allows remote attackers to execute arbitrary PHP...

CVE-2011-4825

Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted...

CVE-2011-3783

phpMyFAQ 2.6.13 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lang/language_uk.php and certain other...

CVE-2018-16651

The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in...

CVE-2018-16650

phpMyFAQ before 2.9.11 allows...

CVE-2014-6049

phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted instance ID...

CVE-2014-6048

phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct...

CVE-2014-6047

phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission...

CVE-2014-6050

phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the...

CVE-2014-6045

SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the restore...

CVE-2014-6046

Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecified users for requests that (1) delete active users by leveraging improper validation of CSRF tokens or that (2) delete open questions, (3) activate...

CVE-2017-15727

In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML...

CVE-2017-15730

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in...

CVE-2017-14619

Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration...

CVE-2017-14618

Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ"...