Lucene search
Veracode Vulnerability DatabaseVERACODE:37610HistoryOct 20, 2022 - 4:29 a.m.
Cross-Site Scripting (XSS)
2022-10-2004:29:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
cross-site scripting
xss
backup export
improper verification
configuration
admin grant
vulnerability
software
0.001 Low
EPSS
Percentile
40.6%
thorsten/phpmyfaq is vulnerable to cross-site scripting. The vulnerability exists in the backup.export.php due to to improper verification of backup files which allows an attacker to export the configuration and re-upload the same file with the admin grant.
| CPE | Name | Operator | Version |
|---|---|---|---|
| thorsten/phpmyfaq | le | 3.1.13 | |
| phpmyfaq/phpmyfaq | le | 3.1.13 | |
| thorsten/phpmyfaq | le | 3.1.13 | |
| phpmyfaq/phpmyfaq | le | 3.1.13 |
Related
osv
osv
CVE-2022-3608
2022-10-19 13:15:08
phpMyFAQ vulnerable to Cross-site Scripting
2022-10-19 19:00:24
prion
prion
Cross site scripting
2022-10-19 13:15:00
cve
cve
CVE-2022-3608
2022-10-19 13:15:08
nvd
nvd
CVE-2022-3608
2022-10-19 13:15:08
cvelist
cvelist
CVE-2022-3608 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
2022-10-19 00:00:00
huntr
huntr
Stored XSS and possible RCE/LFI in case of misconfiguration
2022-10-03 11:10:31
github
github
phpMyFAQ vulnerable to Cross-site Scripting
2022-10-19 19:00:24
openvas
openvas
phpMyFAQ < 3.2.0 XSS Vulnerability
2022-11-03 00:00:00