Filtered by vendor Phpmyfaq
Subscriptions
Filtered by product Phpmyfaq
Subscriptions
Total
132 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2005-3050 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-04-03 | N/A |
| PhpMyFaq 1.5.1 allows remote attackers to obtain sensitive information via a LANGCODE parameter that does not exist, which reveals the path in an error message. | ||||
| CVE-2005-3047 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-04-03 | N/A |
| Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PMF_CONF[version] parameter to footer.php or (2) PMF_LANG[metaLanguage] to header.php. | ||||
| CVE-2005-3734 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-04-03 | N/A |
| Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters. | ||||
| CVE-2005-3048 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-04-03 | N/A |
| Directory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read arbitrary files or include arbitrary PHP files via a .. (dot dot) in the LANGCODE parameter, which also allows direct code injection via the User Agent field in a request packet, which can be activated by using LANGCODE to reference the user tracking data file. | ||||
| CVE-2023-0786 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-03-24 | 8.4 High |
| Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11. | ||||
| CVE-2023-0787 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-03-24 | 8.1 High |
| Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11. | ||||
| CVE-2023-0794 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-03-21 | 8.3 High |
| Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11. | ||||
| CVE-2023-0791 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-03-21 | 8.3 High |
| Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11. | ||||
| CVE-2023-0789 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-03-21 | 8.1 High |
| Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11. | ||||
| CVE-2023-0788 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-03-21 | 8.1 High |
| Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11. | ||||
| CVE-2023-0790 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-03-21 | 7.6 High |
| Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11. | ||||
| CVE-2023-0792 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-03-21 | 6.5 Medium |
| Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11. | ||||
| CVE-2023-0793 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-03-21 | 7.1 High |
| Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11. | ||||
| CVE-2023-0880 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-03-18 | 8.3 High |
| Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11. | ||||
| CVE-2023-5867 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-02-27 | 5.4 Medium |
| Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2. | ||||
| CVE-2023-2550 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-02-12 | 4.8 Medium |
| Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13. | ||||
| CVE-2023-1762 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-02-12 | 8.8 High |
| Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | ||||
| CVE-2023-1753 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-02-11 | 5.5 Medium |
| Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | ||||
| CVE-2023-1754 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-02-11 | 4.7 Medium |
| Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | ||||
| CVE-2023-1755 | 1 Phpmyfaq | 1 Phpmyfaq | 2025-02-11 | 5.4 Medium |
| Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | ||||