Skip to contentThorsten Phpmyfaq vulnerabilities
- phpmyfaqphpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded FramesCVE-2024-55889Public exploitFix available4.9 Medium
- phpmyfaqphpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not availableCVE-2024-54141Fix available8.6 High
- phpmyfaqphpMyFAQ Stored Cross-site Scripting at File AttachmentsCVE-2024-29179Fix available4.3 Medium
- phpmyfaqphpMyFAQ Path Traversal in AttachmentsCVE-2024-29196Fix available3.8 Low
- phpmyfaqphpMyFAQ Stored HTML Injection at contentLinkCVE-2024-28108Fix available4.7 Medium
- phpmyfaqphpMyFAQ SQL injections at insertentry & saveentryCVE-2024-28107Fix available8.8 High
- phpmyfaqphpMyFAQ Stored XSS at FAQ News ContentCVE-2024-28106Fix available4.3 Medium
- phpmyfaqphpMyFAQ's File Upload Bypass at Category Image Leads to RCECVE-2024-28105Fix available7.2 High
- phpmyfaqphpMyFAQ Stored XSS at user emailCVE-2024-27300Fix available5.5 Medium
- phpmyfaqphpMyFAQ SQL Injection at "Save News"CVE-2024-27299Fix available8.8 High
- phpmyfaqphpMyFAQ vulnerable to stored XSS on attachments filenameCVE-2024-24574Fix available6.5 Medium
- phpmyfaqphpMyFAQ sharing FAQ functionality can easily be abused for phishing purposesCVE-2024-22208Fix available6.5 Medium
- phpmyfaqUser Removal Page Allows Spoofing Of User DetailsCVE-2024-22202Fix available5.7 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-6890Fix available5.4 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-6889Fix available5.4 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaqCVE-2023-5866Fix available6.3 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-5867Fix available4.6 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreInsufficient Session Expiration in thorsten/phpmyfaqCVE-2023-5865Fix available7.6 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-5864Fix available7.4 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqCVE-2023-5863Fix available7.4 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - DOM in thorsten/phpmyfaqCVE-2023-5320Fix available9.0 Critical
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-5317Fix available6.3 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - DOM in thorsten/phpmyfaqCVE-2023-5316Fix available9.1 Critical
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-5319Fix available8.3 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreUnrestricted Upload of File with Dangerous Type in thorsten/phpmyfaqCVE-2023-5227Fix available6.5 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-4007Fix available8.8 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreImproper Neutralization of Formula Elements in a CSV File in thorsten/phpmyfaqCVE-2023-4006Fix available8.8 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqCVE-2023-3469Fix available5.2 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-2999Fix available6.7 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-2998Fix available6.0 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-2753Fix available7.2 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-2752Fix available7.2 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-2550Fix available8.2 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqCVE-2023-2427Fix available6.1 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreImproper Access Control in thorsten/phpmyfaqCVE-2023-2429Fix available6.6 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-2428Fix available6.1 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-1875Fix available5.4 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreBusiness Logic Errors in thorsten/phpmyfaqCVE-2023-1887Fix available8.3 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreAuthentication Bypass by Capture-replay in thorsten/phpmyfaqCVE-2023-1886Fix available7.3 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-1885Fix available6.3 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Generic in thorsten/phpmyfaqCVE-2023-1884Fix available4.7 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreImproper Access Control in thorsten/phpmyfaqCVE-2023-1883Fix available5.4 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - DOM in thorsten/phpmyfaqCVE-2023-1882Fix available8.1 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqCVE-2023-1880Fix available8.3 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-1879Fix available4.7 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-1878Fix available8.3 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaqCVE-2023-1758Fix available8.9 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-1757Fix available8.1 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqCVE-2023-1756Fix available4.7 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreImproper Privilege Management in thorsten/phpmyfaqCVE-2023-1762Fix available7.2 High
- Show moreLoading…