Show filters
123 Total Results
Displaying 121-123 of 123
Sort by:
Attacker Value
Unknown
CVE-2005-0702
Disclosure Date: March 07, 2005 (last updated February 22, 2025)
SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages.
0
Attacker Value
Unknown
CVE-2004-2255
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used as part of a template filename.
0
Attacker Value
Unknown
CVE-2004-2257
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request.
0
