Unscored CVE-2005-3047 EUVD-2005-3047GHSA-rx7r-m66x-qh35

Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web script or HTML via the…

Published Sep 23, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PMF_CONF[version] parameter to footer.php or (2) PMF_LANG[metaLanguage] to header.php.

References

http://rgod.altervista.org/phpmyfuck151.html
20050922 PhpMyFAQ 1.5.1 multiple vulnerabilities mailing-list