dbcve.org
Vulnerability index

Browse CVEs

117 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
Phpmyfaq CRITICAL 9.8
CVE-2023-0788

Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Fix: 3.1.11+
Fix from $2,300 2023-02-12
Phpmyfaq CRITICAL 9.8
CVE-2023-0789

Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Fix: 3.1.11+
Fix from $2,300 2023-02-12
Phpmyfaq HIGH 8.8
CVE-2023-0790

Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Fix: 3.1.11+
Fix from $1,950 2023-02-12
Phpmyfaq HIGH 8.8
CVE-2023-0793

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Fix: 3.1.11+
Fix from $1,950 2023-02-12
Phpmyfaq MEDIUM 5.4
CVE-2023-0787

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Fix: 3.1.11+
Fix from $1,600 2023-02-12
Phpmyfaq MEDIUM 5.4
CVE-2023-0791

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Fix: 3.1.11+
Fix from $1,600 2023-02-12
Phpmyfaq MEDIUM 5.4
CVE-2023-0792

Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Fix: 3.1.11+
Fix from $1,600 2023-02-12
Phpmyfaq MEDIUM 5.4
CVE-2023-0794

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Fix: 3.1.11+
Fix from $1,600 2023-02-12
Phpmyfaq MEDIUM 6.1
CVE-2023-0314

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Fix: 3.1.10+
Fix from $1,600 2023-01-15
Phpmyfaq CRITICAL 9.8
CVE-2023-0307

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Fix: 3.1.10+
Fix from $2,300 2023-01-15
Phpmyfaq CRITICAL 9.8
CVE-2023-0311

Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Fix: 3.1.10+
Fix from $2,300 2023-01-15
Phpmyfaq MEDIUM 6.1
CVE-2023-0312

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Fix: 3.1.10+
Fix from $1,600 2023-01-15
Phpmyfaq MEDIUM 5.4
CVE-2023-0306

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Fix: 3.1.10+
Fix from $1,600 2023-01-15
Phpmyfaq MEDIUM 5.4
CVE-2023-0308

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Fix: 3.1.10+
Fix from $1,600 2023-01-15
Phpmyfaq MEDIUM 5.4
CVE-2023-0309

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Fix: 3.1.10+
Fix from $1,600 2023-01-15
Phpmyfaq MEDIUM 5.4
CVE-2023-0310

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Fix: 3.1.10+
Fix from $1,600 2023-01-15
Phpmyfaq MEDIUM 5.4
CVE-2023-0313

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Fix: 3.1.10+
Fix from $1,600 2023-01-15
Phpmyfaq HIGH 7.5
CVE-2022-4409

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

Fix: 3.1.9+
Fix from $1,950 2022-12-11
Phpmyfaq MEDIUM 6.1
CVE-2022-4407

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

Fix: 3.1.9+
Fix from $1,600 2022-12-11
Phpmyfaq MEDIUM 5.4
CVE-2022-4408

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

Fix: 3.1.9+
Fix from $1,600 2022-12-11
Phpmyfaq MEDIUM 6.1
CVE-2022-3766EPSS 6%

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8.

Fix: 3.1.8+
Fix from $1,600 2022-10-31
Phpmyfaq MEDIUM 5.4
CVE-2022-3765

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.8.

Fix: 3.1.8+
Fix from $1,600 2022-10-31
Phpmyfaq CRITICAL 9.8
CVE-2022-3754

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8.

Fix: 3.1.8+
Fix from $2,300 2022-10-29
Phpmyfaq HIGH 8.4
CVE-2022-3608

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha.

Fix: after 3.1.7
Fix from $1,950 2022-10-19
Phpmyfaq HIGH 8.8
CVE-2018-16650

phpMyFAQ before 2.9.11 allows CSRF.

Fix: 2.9.11+
Fix from $1,950 2018-09-07
Phpmyfaq HIGH 7.2
CVE-2018-16651

The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports.

Fix: 2.9.11+
Fix from $1,950 2018-09-07
Phpmyfaq MEDIUM 5.3
CVE-2014-6047EPSS 6%

phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an …

Fix: 2.8.13+
Fix from $1,600 2018-08-28
Phpmyfaq MEDIUM 5.3
CVE-2014-6048EPSS 6%

phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request.

Fix: 2.8.13+
Fix from $1,600 2018-08-28
Phpmyfaq MEDIUM 5.3
CVE-2014-6050

phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request.

Fix: 2.8.13+
Fix from $1,600 2018-08-28
Phpmyfaq HIGH 8.8
CVE-2014-6046

Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecifi…

Fix: 2.8.13+
Fix from $1,950 2018-08-28