thorsten/phpmyfaq

Vulnerabilities (93)

• CVE-2024-56199MedJan 2, 2025
  affected >= 3.2.10, <= 4.0.1

  phpMyFAQ is an open source FAQ web application. Starting no later than version 3.2.10 and prior to version 4.0.2, an attacker can inject malicious HTML content into the FAQ editor at `http[:]//localhost/admin/index[.]php?action=editentry`, resulting in a complete disruption of th

• CVE-2024-55889MedDec 13, 2024
  affected < 3.2.10fixed 3.2.10

  phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an element without user interactio

• CVE-2024-54141HigDec 6, 2024
  affected < 4.0.0fixed 4.0.0

  phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Prior to 4.0.0, phpMyFAQ exposes the database (ie postgreSQL) server's credential when connection to DB fails. This vulnerability is fixed in 4.0.0.

• CVE-2023-6890MedDec 16, 2023
  affected < 3.1.17fixed 3.1.17

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17.

• CVE-2023-6889MedDec 16, 2023
  affected < 3.1.17fixed 3.1.17

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17.

• CVE-2023-5867MedOct 31, 2023
  affected < 3.2.2fixed 3.2.2

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2.

• CVE-2023-5866MedOct 31, 2023
  affected < 3.2.1fixed 3.2.1

  Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1.

• CVE-2023-5865CriOct 31, 2023
  affected < 3.2.2fixed 3.2.2

  Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2.

• CVE-2023-5864MedOct 31, 2023
  affected < 3.2.1fixed 3.2.1

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1.

• CVE-2023-5863MedOct 31, 2023
  affected < 3.2.2fixed 3.2.2

  Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2.

• CVE-2023-5320MedSep 30, 2023
  affected < 3.1.18fixed 3.1.18

  Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18.

• CVE-2023-5319MedSep 30, 2023
  affected < 3.1.18fixed 3.1.18

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18.

• CVE-2023-5317MedSep 30, 2023
  affected < 3.1.18fixed 3.1.18

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18.

• CVE-2023-5316MedSep 30, 2023
  affected < 3.1.18fixed 3.1.18

  Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18.

• CVE-2023-5227CriSep 30, 2023
  affected < 3.1.18fixed 3.1.18

  Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8.

• CVE-2023-4007MedJul 31, 2023
  affected < 3.1.16fixed 3.1.16

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.16.

• CVE-2023-4006CriJul 31, 2023
  affected < 3.1.16fixed 3.1.16

  Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to 3.1.16.

• CVE-2023-3469MedJun 30, 2023
  affected < 3.2.0-beta.2fixed 3.2.0-beta.2

  Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.2.

• CVE-2023-2999MedMay 31, 2023
  affected < 3.1.14fixed 3.1.14

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14.

• CVE-2023-2998MedMay 31, 2023
  affected < 3.1.14fixed 3.1.14

  Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14.