thorsten/phpmyfaq

112 results · Feed

• Medium 4.9
  CVE-2024-55889 Public exploit

  phpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded Frames

  phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an <iframe> element wi…

  thorsten phpMyFAQ thorsten/phpmyfaq Packagist
  Dec 13, 2024
• High 8.6
  CVE-2024-54141

  phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available

  phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Prior to 4.0.0, phpMyFAQ exposes the database (ie postgreSQL) server's credential when connection to DB fails. This vulnerability is fixed in 4.0.0.

  thorsten phpMyFAQ thorsten/phpmyfaq Packagist
  Dec 6, 2024
• Medium 5.4
  CVE-2023-6890

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Dec 16, 2023
• Medium 5.4
  CVE-2023-6889

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Dec 16, 2023
• Medium 6.3
  CVE-2023-5866

  Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq

  Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Oct 31, 2023
• Medium 4.6
  CVE-2023-5867

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Oct 31, 2023
• High 7.6
  CVE-2023-5865

  Insufficient Session Expiration in thorsten/phpmyfaq

  Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Oct 31, 2023
• High 7.4
  CVE-2023-5863 Scanner template

  Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Oct 31, 2023
• High 7.4
  CVE-2023-5864

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Oct 31, 2023
• Critical 9.0
  CVE-2023-5320

  Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Sep 30, 2023
• Medium 6.3
  CVE-2023-5317

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Sep 30, 2023
• Critical 9.1
  CVE-2023-5316

  Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Sep 30, 2023
• High 8.3
  CVE-2023-5319

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Sep 30, 2023
• Medium 6.5
  CVE-2023-5227

  Unrestricted Upload of File with Dangerous Type in thorsten/phpmyfaq

  Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Sep 30, 2023
• High 8.8
  CVE-2023-4007

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.16.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Jul 31, 2023
• High 8.8
  CVE-2023-4006

  Improper Neutralization of Formula Elements in a CSV File in thorsten/phpmyfaq

  Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to 3.1.16.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Jul 31, 2023
• Medium 5.2
  CVE-2023-3469

  Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.2.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Jun 30, 2023
• Medium 6.0
  CVE-2023-2998

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  May 31, 2023
• Medium 6.7
  CVE-2023-2999

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  May 31, 2023
• High 7.2
  CVE-2023-2753

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  May 17, 2023
• High 7.2
  CVE-2023-2752

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  May 17, 2023
• High 8.2
  CVE-2023-2550

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  May 5, 2023
• Medium 6.1
  CVE-2023-2427

  Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.13.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  May 5, 2023
• Medium 6.6
  CVE-2023-2429

  Improper Access Control in thorsten/phpmyfaq

  Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.13.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Apr 30, 2023
• Medium 6.1
  CVE-2023-2428

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Apr 30, 2023
• Medium 5.4
  CVE-2023-1875

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Apr 22, 2023
• Medium 4.7
  CVE-2023-1884

  Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Apr 5, 2023
• High 8.1
  CVE-2023-1757

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Apr 5, 2023
• High 8.9
  CVE-2023-1758

  Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaq

  Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Apr 5, 2023
• High 8.1
  CVE-2023-1882

  Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Apr 5, 2023
• Medium 5.4
  CVE-2023-1883

  Improper Access Control in thorsten/phpmyfaq

  Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Apr 5, 2023
• Medium 4.7
  CVE-2023-1879

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Apr 5, 2023
• High 8.3
  CVE-2023-1887

  Business Logic Errors in thorsten/phpmyfaq

  Business Logic Errors in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Apr 5, 2023
• High 8.3
  CVE-2023-1878

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Apr 5, 2023
• High 7.3
  CVE-2023-1886

  Authentication Bypass by Capture-replay in thorsten/phpmyfaq

  Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Apr 5, 2023
• Medium 4.7
  CVE-2023-1756

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Apr 5, 2023
• Medium 6.3
  CVE-2023-1885

  Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Apr 5, 2023
• High 8.3
  CVE-2023-1880 Scanner template

  Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

  Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Apr 5, 2023
• Medium 4.7
  CVE-2023-1754

  Improper Neutralization of Input During Web Page Generation in thorsten/phpmyfaq

  Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Mar 31, 2023
• Medium 6.3
  CVE-2023-1761

  Cross-site Scripting in thorsten/phpmyfaq

  Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

  thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  Mar 31, 2023