Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Phpmyfaq
(Phpmyfaq)| Repositories | https://github.com/thorsten/phpMyFAQ |
| #Vulnerabilities | 124 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2018-09-07 | CVE-2018-16650 | phpMyFAQ before 2.9.11 allows CSRF. | Phpmyfaq | 8.8 | ||
| 2017-04-07 | CVE-2017-7579 | inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field. | Phpmyfaq | 6.1 | ||
| 2017-10-23 | CVE-2017-15809 | In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag. | Phpmyfaq | 6.1 | ||
| 2017-10-23 | CVE-2017-15808 | In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php. | Phpmyfaq | 8.8 | ||
| 2017-10-22 | CVE-2017-15735 | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a glossary. | Phpmyfaq | 8.8 | ||
| 2017-10-22 | CVE-2017-15734 | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.php. | Phpmyfaq | 8.8 | ||
| 2017-10-22 | CVE-2017-15733 | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and admin/att.main.php. | Phpmyfaq | 8.8 | ||
| 2017-10-22 | CVE-2017-15732 | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/news.php. | Phpmyfaq | 8.8 | ||
| 2017-10-22 | CVE-2017-15731 | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.adminlog.php. | Phpmyfaq | 8.8 | ||
| 2017-10-22 | CVE-2017-15730 | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php. | Phpmyfaq | 8.8 |