| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain sensitive information via a direct request to the data/tracking[DATE] file. |
| Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters. |
| Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly execute local PHP files, via .. sequences in the lang (language) variable. |
| phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request. |
| Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
|
| Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
|
| Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
|
| Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
|
| Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
|
| Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
|
| Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
|
| Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
|
| Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
|
| Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
|
| Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2. |
| Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13. |
| Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12. |
| Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
|
| Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to 3.1.12. |
| Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12. |