Phpmyfaq vulnerabilities, page 2
159 vulnerabilities
Known vulnerabilities in Phpmyfaq products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
CVE-2005-3046phpmyfaqphpmyfaq
EPSS score1.14%
SQL injection vulnerability in password.php in PhpMyFaq 1.5.1 allows remote attackers to modify SQL queries and gain administrator privileges via the user field.CVE-2005-3734phpmyfaqphpmyfaqEPSS score1.48%
Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters.CVE-2022-4407phpmyfaqphpmyfaq+1EPSS score4.85%
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.CVE-2022-4408phpmyfaqphpmyfaq+1EPSS score0.51%
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.9.CVE-2022-4409phpmyfaqphpmyfaq+1EPSS score0.46%
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.1.9.CVE-2022-3766phpmyfaqphpmyfaq+1EPSS score6.48%
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8.CVE-2022-3608phpmyfaqphpmyfaq+1EPSS score1.15%
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha.CVE-2022-3754phpmyfaqphpmyfaq+1EPSS score1.27%
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8.CVE-2022-3765phpmyfaqphpmyfaq+1EPSS score0.60%
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.8.CVE-2011-4825phpletterajax_file_and_image_manager+2EPSS score39.16%
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.CVE-2011-3783phpmyfaqphpmyfaqEPSS score1.23%
phpMyFAQ 2.6.13 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lang/language_uk.php and certain other files.CVE-2010-4558phpmyfaqphpmyfaqEPSS score1.41%
phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification (Trojan Horse) in the getTopTen method in inc/Faq.php, which allows remote attackers to execute arbitrary PHP code.CVE-2010-4821phpmyfaqphpmyfaqEPSS score4.74%
Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.CVE-2017-11187phpmyfaqphpmyfaqEPSS score1.05%
phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly.CVE-2017-14619phpmyfaqphpmyfaqEPSS score2.17%
Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module.CVE-2017-14618phpmyfaqphpmyfaqEPSS score2.43%
Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action.CVE-2017-7579phpmyfaqphpmyfaqEPSS score0.67%
inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field.CVE-2017-15730phpmyfaqphpmyfaqEPSS score2.48%
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php.CVE-2017-15734phpmyfaqphpmyfaqEPSS score1.10%
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.php.CVE-2017-15809phpmyfaqphpmyfaqEPSS score0.62%
In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag.