Browse CVEs

CRITICAL 9.8 CVE-2023-0788 Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Phpmyfaq 3.1.11+ Fix from $2,3002023-02-12 CRITICAL 9.8 CVE-2023-0789 Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Phpmyfaq 3.1.11+ Fix from $2,3002023-02-12 HIGH 8.8 CVE-2023-0790 Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Phpmyfaq 3.1.11+ Fix from $1,9502023-02-12 HIGH 8.8 CVE-2023-0793 Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Phpmyfaq 3.1.11+ Fix from $1,9502023-02-12 MEDIUM 5.4 CVE-2023-0787 Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Phpmyfaq 3.1.11+ Fix from $1,6002023-02-12 MEDIUM 5.4 CVE-2023-0791 Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Phpmyfaq 3.1.11+ Fix from $1,6002023-02-12 MEDIUM 5.4 CVE-2023-0792 Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Phpmyfaq 3.1.11+ Fix from $1,6002023-02-12 MEDIUM 5.4 CVE-2023-0794 Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11. Phpmyfaq 3.1.11+ Fix from $1,6002023-02-12 MEDIUM 6.1 CVE-2023-0314 Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10. Phpmyfaq 3.1.10+ Fix from $1,6002023-01-15 CRITICAL 9.8 CVE-2023-0307 Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10. Phpmyfaq 3.1.10+ Fix from $2,3002023-01-15 CRITICAL 9.8 CVE-2023-0311 Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10. Phpmyfaq 3.1.10+ Fix from $2,3002023-01-15 MEDIUM 6.1 CVE-2023-0312 Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10. Phpmyfaq 3.1.10+ Fix from $1,6002023-01-15 MEDIUM 5.4 CVE-2023-0306 Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10. Phpmyfaq 3.1.10+ Fix from $1,6002023-01-15 MEDIUM 5.4 CVE-2023-0308 Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10. Phpmyfaq 3.1.10+ Fix from $1,6002023-01-15 MEDIUM 5.4 CVE-2023-0309 Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10. Phpmyfaq 3.1.10+ Fix from $1,6002023-01-15 MEDIUM 5.4 CVE-2023-0310 Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10. Phpmyfaq 3.1.10+ Fix from $1,6002023-01-15 MEDIUM 5.4 CVE-2023-0313 Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10. Phpmyfaq 3.1.10+ Fix from $1,6002023-01-15 HIGH 7.5 CVE-2022-4409 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.1.9. Phpmyfaq 3.1.9+ Fix from $1,9502022-12-11 MEDIUM 6.1 CVE-2022-4407 Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9. Phpmyfaq 3.1.9+ Fix from $1,6002022-12-11 MEDIUM 5.4 CVE-2022-4408 Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.9. Phpmyfaq 3.1.9+ Fix from $1,6002022-12-11 MEDIUM 6.1 CVE-2022-3766EPSS 6% Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8. Phpmyfaq 3.1.8+ Fix from $1,6002022-10-31 MEDIUM 5.4 CVE-2022-3765 Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.8. Phpmyfaq 3.1.8+ Fix from $1,6002022-10-31 CRITICAL 9.8 CVE-2022-3754 Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8. Phpmyfaq 3.1.8+ Fix from $2,3002022-10-29 HIGH 8.4 CVE-2022-3608 Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha. Phpmyfaq after 3.1.7 Fix from $1,9502022-10-19 HIGH 8.8 CVE-2018-16650 phpMyFAQ before 2.9.11 allows CSRF. Phpmyfaq 2.9.11+ Fix from $1,9502018-09-07 HIGH 7.2 CVE-2018-16651 The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports. Phpmyfaq 2.9.11+ Fix from $1,9502018-09-07 MEDIUM 5.3 CVE-2014-6047EPSS 6% phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an … Phpmyfaq 2.8.13+ Fix from $1,6002018-08-28 MEDIUM 5.3 CVE-2014-6048EPSS 6% phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request. Phpmyfaq 2.8.13+ Fix from $1,6002018-08-28 MEDIUM 5.3 CVE-2014-6050 phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request. Phpmyfaq 2.8.13+ Fix from $1,6002018-08-28 HIGH 8.8 CVE-2014-6046 Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecifi… Phpmyfaq 2.8.13+ Fix from $1,9502018-08-28