CVE-2010-4821

MEDIUM 4.3CVE-2010-4821 · Published 22/10/2012 · updated 16/06/2026

In short

CVE-2010-4821 is a MEDIUM (CVSS 4.3) vulnerability affecting phpmyfaq (phpmyfaq).
Chance of exploitation in the next 30 days (EPSS): 4.7%, higher than 91.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phpmyfaq phpmyfaq	`= 1.0= 1.0.1= 1.0.1a= 1.1.0= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.4a= 1.1.5= 1.2.0= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.2.5= 1.2.5a= 1.2.5b= 1.3.0= 1.3.1= 1.3.10= 1.3.11= 1.3.12= 1.3.13= 1.3.14= 1.3.2= 1.3.3= 1.3.4= 1.3.5= 1.3.6= 1.3.7= 1.3.8= 1.3.9= 1.4= 1.4.0= 1.4.0a= 1.4.1= 1.4.10= 1.4.11= 1.4.2= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.4.7= 1.4.8= 1.4.9= 1.5= 1.5.0= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.5.6= 1.5.7= 1.5.8= 1.5.9= 1.6.0= 1.6.1= 1.6.10= 1.6.11= 1.6.12= 1.6.2= 1.6.3= 1.6.4= 1.6.5= 1.6.6= 1.6.7= 1.6.8= 1.6.9= 2.0.0= 2.0.1= 2.0.10= 2.0.11= 2.0.12= 2.0.13= 2.0.14= 2.0.15= 2.0.16= 2.0.17= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.7= 2.0.8= 2.0.9= 2.5.0= 2.5.1= 2.5.2= 2.5.3= 2.5.4= 2.5.5= 2.5.6= 2.5.7= 2.6.0= 2.6.1= 2.6.2= 2.6.3= 2.6.4= 2.6.5= 2.6.6= 2.6.7≤ 2.6.8`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.

References

dl.packetstormsecurity.net/1009-exploits/phpmyfaq268-xss.txt · Exploit
seclists.org/bugtraq/2010/Sep/207 · Exploit
secunia.com/advisories/41625 · Vendor Advisory
openwall.com/lists/oss-security/2012/03/08/2
openwall.com/lists/oss-security/2012/03/08/7
osvdb.org/68268
phpmyfaq.de/advisory_2010-09-28.php · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/62092

More vulnerabilities in phpmyfaq

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

phpmyfaq

= 1.0= 1.0.1= 1.0.1a= 1.1.0= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.4a= 1.1.5= 1.2.0= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.2.5= 1.2.5a= 1.2.5b= 1.3.0= 1.3.1= 1.3.10= 1.3.11= 1.3.12= 1.3.13= 1.3.14= 1.3.2= 1.3.3= 1.3.4= 1.3.5= 1.3.6= 1.3.7= 1.3.8= 1.3.9= 1.4= 1.4.0= 1.4.0a= 1.4.1= 1.4.10= 1.4.11= 1.4.2= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.4.7= 1.4.8= 1.4.9= 1.5= 1.5.0= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.5.6= 1.5.7= 1.5.8= 1.5.9= 1.6.0= 1.6.1= 1.6.10= 1.6.11= 1.6.12= 1.6.2= 1.6.3= 1.6.4= 1.6.5= 1.6.6= 1.6.7= 1.6.8= 1.6.9= 2.0.0= 2.0.1= 2.0.10= 2.0.11= 2.0.12= 2.0.13= 2.0.14= 2.0.15= 2.0.16= 2.0.17= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.7= 2.0.8= 2.0.9= 2.5.0= 2.5.1= 2.5.2= 2.5.3= 2.5.4= 2.5.5= 2.5.6= 2.5.7= 2.6.0= 2.6.1= 2.6.2= 2.6.3= 2.6.4= 2.6.5= 2.6.6= 2.6.7≤ 2.6.8

No fix yet

More vulnerabilities in phpmyfaq

See all →