Search Results (141 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2010-4558 1 Phpmyfaq 1 Phpmyfaq 2025-04-11 N/A
phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification (Trojan Horse) in the getTopTen method in inc/Faq.php, which allows remote attackers to execute arbitrary PHP code.
CVE-2010-4821 1 Phpmyfaq 1 Phpmyfaq 2025-04-11 N/A
Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
CVE-2024-28107 2 Phpmyfaq, Thorsten 2 Phpmyfaq, Phpmyfaq 2025-04-10 8.8 High
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. A SQL injection vulnerability has been discovered in the `insertentry` & `saveentry` when modifying records due to improper escaping of the email address. This allows any authenticated user with the rights to add/edit FAQ news to exploit this vulnerability to exfiltrate data, take over accounts and in some cases, even achieve RCE. This vulnerability is fixed in 3.2.6.
CVE-2024-29179 1 Phpmyfaq 1 Phpmyfaq 2025-04-10 4.8 Medium
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. An attacker with admin privileges can upload an attachment containing JS code without extension and the application will render it as HTML which allows for XSS attacks.
CVE-2023-0306 1 Phpmyfaq 1 Phpmyfaq 2025-04-07 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2023-0307 1 Phpmyfaq 1 Phpmyfaq 2025-04-07 9.8 Critical
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2023-0308 1 Phpmyfaq 1 Phpmyfaq 2025-04-07 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2023-0309 1 Phpmyfaq 1 Phpmyfaq 2025-04-07 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2023-0310 1 Phpmyfaq 1 Phpmyfaq 2025-04-07 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2023-0311 1 Phpmyfaq 1 Phpmyfaq 2025-04-07 9.8 Critical
Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2023-0312 1 Phpmyfaq 1 Phpmyfaq 2025-04-07 6.1 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2023-0313 1 Phpmyfaq 1 Phpmyfaq 2025-04-07 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2023-0314 1 Phpmyfaq 1 Phpmyfaq 2025-04-07 6.1 Medium
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2023-0786 1 Phpmyfaq 1 Phpmyfaq 2025-03-24 8.4 High
Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
CVE-2023-0787 1 Phpmyfaq 1 Phpmyfaq 2025-03-24 8.1 High
Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
CVE-2023-0794 1 Phpmyfaq 1 Phpmyfaq 2025-03-21 8.3 High
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
CVE-2023-0791 1 Phpmyfaq 1 Phpmyfaq 2025-03-21 8.3 High
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
CVE-2023-0789 1 Phpmyfaq 1 Phpmyfaq 2025-03-21 8.1 High
Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
CVE-2023-0788 1 Phpmyfaq 1 Phpmyfaq 2025-03-21 8.1 High
Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
CVE-2023-0790 1 Phpmyfaq 1 Phpmyfaq 2025-03-21 7.6 High
Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11.