Show filters
13 Total Results
Displaying 11-13 of 13
Sort by:
Attacker Value
Unknown
CVE-2005-3049
Disclosure Date: September 24, 2005 (last updated February 22, 2025)
PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain sensitive information via a direct request to the data/tracking[DATE] file.
0
Attacker Value
Unknown
CVE-2005-3047
Disclosure Date: September 24, 2005 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PMF_CONF[version] parameter to footer.php or (2) PMF_LANG[metaLanguage] to header.php.
0
Attacker Value
Unknown
CVE-2005-0702
Disclosure Date: March 07, 2005 (last updated February 22, 2025)
SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages.
0
