PH
Product
phpMyFAQ
159
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 38Medium 86Low 3
Watch
Add phpMyFAQ to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-6913 | – | Dec 31 | Unspecified vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to upload arbitrary PHP scripts via unspecified vectors Affected: through 1.6.7 |
| CVE-2005-3734 | – | Nov 22 | Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema,… Affected: 1.5; 1.5.1; 1.5.3; 1.5_alpha1; 1.5_alpha2; 1.5_beta1; +7 more |
| CVE-2005-3049 | – | Sep 24 | PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain sensitive… Affected: 1.5.1 |
| CVE-2005-3050 | – | Sep 24 | PhpMyFaq 1.5.1 allows remote attackers to obtain sensitive information via a LANGCODE parameter that does not exist, which reveals the path in an error message Affected: 1.5.1 |
| CVE-2005-3047 | – | Sep 24 | Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PMF_CONF[version] parameter to… Affected: 1.5.1 |
| CVE-2005-3046 | – | Sep 24 | SQL injection vulnerability in password.php in PhpMyFaq 1.5.1 allows remote attackers to modify SQL queries and gain administrator privileges via the user field Affected: 1.5.1 |
| CVE-2005-3048 | – | Sep 24 | Directory traversal vulnerability in index.php in PhpMyFaq 1.5.1 allows remote attackers to read arbitrary files or include arbitrary PHP files via a Affected: 1.5.1 |
| CVE-2005-0702 | – | Mar 7 | SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages Affected: 1.4; 1.4_alpha1; 1.4_alpha2; 1.4a; 1.5 |
| CVE-2004-2255 | – | Dec 31 | Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used… Affected: 1.3.12 |