Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
phpmyfaq phpmyfaq vulnerabilities and exploits
(subscribe to this query)
5.4
CVSSv3
CVE-2023-6890
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq before 3.1.17.
Phpmyfaq Phpmyfaq
4.8
CVSSv3
CVE-2023-2550
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq before 3.1.13.
Phpmyfaq Phpmyfaq
4.8
CVSSv3
CVE-2017-14618
Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ up to and including 2.9.8 allows remote malicious users to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action.
Phpmyfaq Phpmyfaq
1 EDB exploit
6.1
CVSSv3
CVE-2017-14619
Cross-site scripting (XSS) vulnerability in phpMyFAQ up to and including 2.9.8 allows remote malicious users to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module.
Phpmyfaq Phpmyfaq
1 EDB exploit
5.4
CVSSv3
CVE-2022-3765
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq before 3.1.8.
Phpmyfaq Phpmyfaq
6.1
CVSSv3
CVE-2022-3766
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq before 3.1.8.
Phpmyfaq Phpmyfaq
NA
CVE-2006-6913
Unspecified vulnerability in phpMyFAQ 1.6.7 and previous versions allows remote malicious users to upload arbitrary PHP scripts via unspecified vectors.
Phpmyfaq Phpmyfaq
2.7
CVSSv3
CVE-2014-6049
phpMyFAQ prior to 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted instance ID parameter.
Phpmyfaq Phpmyfaq
1 EDB exploit
5.3
CVSSv3
CVE-2014-6050
phpMyFAQ prior to 2.8.13 allows remote malicious users to bypass the CAPTCHA protection mechanism by replaying the request.
Phpmyfaq Phpmyfaq
1 EDB exploit
7.2
CVSSv3
CVE-2014-6045
SQL injection vulnerability in phpMyFAQ prior to 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the restore function.
Phpmyfaq Phpmyfaq
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
cross-site request forgery
CVE-2024-34351
CVE-2024-1076
CVE-2024-25522
CVE-2024-34547
CVE-2024-4644
unauthorized
remote
CVE-2024-4671
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »