Vulnerabilities (CVE)

Filtered by vendor Phpmyfaq Subscribe
Filtered by product Phpmyfaq
Total 116 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-0306 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2023-0310 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2022-4408 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.9.
CVE-2023-0308 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2022-4407 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 N/A 6.1 MEDIUM
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.
CVE-2023-0307 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 N/A 9.8 CRITICAL
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2023-0311 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 N/A 9.8 CRITICAL
Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2023-0314 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 N/A 6.1 MEDIUM
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2023-0313 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
CVE-2022-3766 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 N/A 6.1 MEDIUM
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
CVE-2022-3754 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 N/A 9.8 CRITICAL
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
CVE-2022-3765 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
CVE-2022-3608 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 N/A 8.4 HIGH
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha.
CVE-2014-6048 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 5.0 MEDIUM 5.3 MEDIUM
phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request.
CVE-2014-6050 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 5.0 MEDIUM 5.3 MEDIUM
phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request.
CVE-2014-6046 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 6.8 MEDIUM 8.8 HIGH
Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecified users for requests that (1) delete active users by leveraging improper validation of CSRF tokens or that (2) delete open questions, (3) activate users, (4) publish FAQs, (5) add or delete Glossary, (6) add or delete FAQ news, or (7) add or delete comments or add votes by leveraging lack of a CSRF token.
CVE-2018-16651 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 9.0 HIGH 7.2 HIGH
The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports.
CVE-2014-6047 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 5.0 MEDIUM 5.3 MEDIUM
phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks.
CVE-2014-6045 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 6.5 MEDIUM 7.2 HIGH
SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the restore function.
CVE-2018-16650 1 Phpmyfaq 1 Phpmyfaq 2023-12-10 6.8 MEDIUM 8.8 HIGH
phpMyFAQ before 2.9.11 allows CSRF.