Show filters
126 Total Results
Displaying 81-90 of 126
Sort by:
Attacker Value
Unknown

CVE-2022-3765

Disclosure Date: October 31, 2022 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
Attacker Value
Unknown

CVE-2022-3754

Disclosure Date: October 29, 2022 (last updated February 24, 2025)
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
Attacker Value
Unknown

CVE-2022-3608

Disclosure Date: October 19, 2022 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha.
Attacker Value
Unknown

CVE-2018-16651

Disclosure Date: September 07, 2018 (last updated November 27, 2024)
The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports.
0
Attacker Value
Unknown

CVE-2018-16650

Disclosure Date: September 07, 2018 (last updated November 27, 2024)
phpMyFAQ before 2.9.11 allows CSRF.
0
Attacker Value
Unknown

CVE-2014-6045

Disclosure Date: August 28, 2018 (last updated November 27, 2024)
SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the restore function.
0
Attacker Value
Unknown

CVE-2014-6048

Disclosure Date: August 28, 2018 (last updated November 27, 2024)
phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request.
0
Attacker Value
Unknown

CVE-2014-6047

Disclosure Date: August 28, 2018 (last updated November 27, 2024)
phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks.
0
Attacker Value
Unknown

CVE-2014-6049

Disclosure Date: August 28, 2018 (last updated November 27, 2024)
phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted instance ID parameter.
0
Attacker Value
Unknown

CVE-2014-6050

Disclosure Date: August 28, 2018 (last updated November 27, 2024)
phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request.
0