CVE-2017-14618

概要

参考情報

• phpmyfaq.de/security/advisory-2017-10-19
• packetstormsecurity.com/files/144280/phpMyFAQ-2.9.8-Cross-Site-Scripting.html
• exploit-db.com/exploits/42761 · Exploit

phpmyfaq のその他の脆弱性

• CVE-2026-76215中 5.3phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unaut…
• CVE-2026-76214高 7.4phpMyFAQ before 4.1.7 fails to persist the WebAuthn login challenge generated by prepareForLogin, because neither WebAuthn controller saves …
• CVE-2026-76213高 7.4phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is session-scoped…
• CVE-2026-76212中 5.3phpMyFAQ before 4.1.7, when configured to use PostgreSQL via the native pgsql PHP extension, declares an incorrect LIKE ESCAPE character ('=…
• CVE-2026-76211中 4.3phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATION_EDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearc…