Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
phpmyfaq vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-1887
Business Logic Errors in GitHub repository thorsten/phpmyfaq before 3.1.12.
Phpmyfaq Phpmyfaq
355
VMScore
CVE-2017-14618
Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ up to and including 2.9.8 allows remote malicious users to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action.
Phpmyfaq Phpmyfaq
1 EDB exploit
435
VMScore
CVE-2017-14619
Cross-site scripting (XSS) vulnerability in phpMyFAQ up to and including 2.9.8 allows remote malicious users to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module.
Phpmyfaq Phpmyfaq
1 EDB exploit
NA
CVE-2023-2998
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq before 3.1.14.
Phpmyfaq Phpmyfaq
NA
CVE-2023-2999
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq before 3.1.14.
Phpmyfaq Phpmyfaq
655
VMScore
CVE-2014-6045
SQL injection vulnerability in phpMyFAQ prior to 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the restore function.
Phpmyfaq Phpmyfaq
1 EDB exploit
505
VMScore
CVE-2014-6047
phpMyFAQ prior to 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks.
Phpmyfaq Phpmyfaq
1 EDB exploit
555
VMScore
CVE-2014-6049
phpMyFAQ prior to 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted instance ID parameter.
Phpmyfaq Phpmyfaq
1 EDB exploit
505
VMScore
CVE-2014-6050
phpMyFAQ prior to 2.8.13 allows remote malicious users to bypass the CAPTCHA protection mechanism by replaying the request.
Phpmyfaq Phpmyfaq
1 EDB exploit
NA
CVE-2023-5863
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq before 3.2.2.
Phpmyfaq Phpmyfaq
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
5
6
7
8
9
10
NEXT »