CVE-2017-14618

Mô tả

Tham khảo

• phpmyfaq.de/security/advisory-2017-10-19
• packetstormsecurity.com/files/144280/phpMyFAQ-2.9.8-Cross-Site-Scripting.html
• exploit-db.com/exploits/42761 · Exploit

Lỗ hổng khác của phpmyfaq

• CVE-2026-76215TRUNG BÌNH 5.3phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unaut…
• CVE-2026-76214CAO 7.4phpMyFAQ before 4.1.7 fails to persist the WebAuthn login challenge generated by prepareForLogin, because neither WebAuthn controller saves …
• CVE-2026-76213CAO 7.4phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is session-scoped…
• CVE-2026-76212TRUNG BÌNH 5.3phpMyFAQ before 4.1.7, when configured to use PostgreSQL via the native pgsql PHP extension, declares an incorrect LIKE ESCAPE character ('=…
• CVE-2026-76211TRUNG BÌNH 4.3phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATION_EDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearc…