← Back

CVE-2009-4040

nvd nist
Published: Nov 20, 2009Modified: Apr 23, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page.

Affected (115)

Products: Phpmyfaq: Phpmyfaq
1 product
Phpmyfaq
Configuration A
115 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Phpmyfaq
Up to 2.0.16
Version 0.60
Version 0.65
Version 0.666
Version 0.70
Version 0.80
Version 0.80a
Version 0.85
Version 0.86
Version 0.87
Version 0.90
Version 0.95
Version 1.0.1
Version 1.0.1a
Version 1.0
Version 1.1.0
Version 1.1.1
Version 1.1.2
Version 1.1.3
Version 1.1.4
Version 1.1.4a
Version 1.1.5
Version 1.2.0
Version 1.2.1
Version 1.2.2
Version 1.2.3
Version 1.2.4
Version 1.2.5
Version 1.2.5a
Version 1.2.5b
Version 1.3.0
Version 1.3.10
Version 1.3.11
Version 1.3.12
Version 1.3.13
Version 1.3.14
Version 1.3.1
Version 1.3.2
Version 1.3.3
Version 1.3.4
Version 1.3.5
Version 1.3.6
Version 1.3.7
Version 1.3.8
Version 1.3.9
Version 1.3.9pl1
Version 1.4.0
Version 1.4.0a
Version 1.4.10
Version 1.4.11
Version 1.4.1
Version 1.4.2
Version 1.4.3
Version 1.4.4
Version 1.4.5
Version 1.4.6
Version 1.4.7
Version 1.4.8
Version 1.4.9
Version 1.4
Version 1.4_alpha1
Version 1.4_alpha2
Version 1.4a
Version 1.5.0
Version 1.5.1
Version 1.5.2
Version 1.5.3
Version 1.5.4
Version 1.5.5
Version 1.5.6
Version 1.5.7
Version 1.5.8
Version 1.5.9
Version 1.5
Version 1.5 rc1
Version 1.5 rc2
Version 1.5 rc3
Version 1.5 rc4
Version 1.5 rc5
Version 1.5_alpha1
Version 1.5_alpha2
Version 1.5_beta1
Version 1.5_beta2
Version 1.5_beta3
Version 1.6.0
Version 1.6.10
Version 1.6.11
Version 1.6.12
Version 1.6.1
Version 1.6.2
Version 1.6.3
Version 1.6.4
Version 1.6.5
Version 1.6.6
Version 1.6.7
Version 1.6.8
Version 1.6.9
Version 2.0.0
Version 2.0.10
Version 2.0.11
Version 2.0.12
Version 2.0.13
Version 2.0.14
Version 2.0.15
Version 2.0.1
Version 2.0.2
Version 2.0.3
Version 2.0.4
Version 2.0.5
Version 2.0.6
Version 2.0.7
Version 2.0.8
Version 2.0.9
Version 2.5.0
Version 2.5.1
Running on/withPlatform Versions
Microsoft
Internet Explorer
Version 6
Microsoft
Internet Explorer
Version 7

References (6)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.