Tra cứu CVE

Mọi CVE đã công bố cùng các advisory mã nguồn mở (NVD, OSV, GitHub), kèm CVSS, EPSS và cho biết lỗ hổng có đang bị khai thác thực tế hay không (CISA KEV). Cập nhật mỗi vài giờ. Các bài quét đối chiếu dữ liệu này với công nghệ phát hiện được trên site.

402.215 lỗ hổng · 1.766 đang bị khai thác (CISA KEV)

phpmyfaq ✕Xoá bộ lọc

154 kết quả

Mã	Mức độ	Mô tả	Công bố
CVE-2024-22208	TRUNG BÌNH6.5	phpMyFAQ is an Open Source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The 'sharing FAQ' functionality allows any unauthenticated actor to misuse the phpMyFAQ application to send arbitrary emails to a large range of targets. The phpMyFAQ application has a functionality where anyone can s	05/02/2024
CVE-2024-22202	TRUNG BÌNH6.5	phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. phpMyFAQ's user removal page allows an attacker to spoof another user's detail, and in turn make a compelling phishing case for removing another user's account. The front-end of this page doesn't allow changing the fo	05/02/2024
CVE-2023-6890	TRUNG BÌNH5.4	Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17.	16/12/2023
CVE-2023-6889	TRUNG BÌNH5.4	Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17.	16/12/2023
CVE-2023-5867	TRUNG BÌNH5.4	Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2.	31/10/2023
CVE-2023-5866	TRUNG BÌNH5.7	Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1.	31/10/2023
CVE-2023-5865	NGHIÊM TRỌNG9.8	Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2.	31/10/2023
CVE-2023-5864	TRUNG BÌNH4.8	Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1.	31/10/2023
CVE-2023-5863	TRUNG BÌNH6.1	Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2.	31/10/2023
CVE-2023-5320	TRUNG BÌNH6.1	Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18.	30/09/2023
CVE-2023-5319	TRUNG BÌNH5.4	Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18.	30/09/2023
CVE-2023-5317	TRUNG BÌNH5.4	Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18.	30/09/2023
CVE-2023-5316	TRUNG BÌNH6.1	Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18.	30/09/2023
CVE-2023-5227	NGHIÊM TRỌNG9.8	Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8.	30/09/2023
CVE-2023-4007	TRUNG BÌNH5.4	Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.16.	31/07/2023
CVE-2023-4006	NGHIÊM TRỌNG9.8	Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to 3.1.16.	31/07/2023
CVE-2023-3469	TRUNG BÌNH4.8	Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.2.	30/06/2023
CVE-2023-2999	TRUNG BÌNH6.1	Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14.	31/05/2023
CVE-2023-2998	TRUNG BÌNH6.1	Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14.	31/05/2023
CVE-2023-2753	TRUNG BÌNH5.4	Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.	17/05/2023