← Back

Phpmyfaq

phpmyfaq

154 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Phpmyfaq
phpmyfaq
154 CVEs

CVEs (154)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-15808
1Phpmyfaq
1Phpmyfaq
May 13, 2026
Oct 23, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php.
CVE-2017-15735
1Phpmyfaq
1Phpmyfaq
May 13, 2026
Oct 22, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a glossary.
CVE-2017-15734
1Phpmyfaq
1Phpmyfaq
May 13, 2026
Oct 22, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.php.
CVE-2017-15733
1Phpmyfaq
1Phpmyfaq
May 13, 2026
Oct 22, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and admin/att.main.php.
CVE-2017-15732
1Phpmyfaq
1Phpmyfaq
May 13, 2026
Oct 22, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/news.php.
CVE-2017-15731
1Phpmyfaq
1Phpmyfaq
May 13, 2026
Oct 22, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.adminlog.php.
CVE-2017-15730
1Phpmyfaq
1Phpmyfaq
May 13, 2026
Oct 22, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php.
CVE-2017-15729
1Phpmyfaq
1Phpmyfaq
May 13, 2026
Oct 22, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for adding a glossary.
CVE-2017-15728
1Phpmyfaq
1Phpmyfaq
May 13, 2026
Oct 22, 2017
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via metaDescription or metaKeywords.
CVE-2017-15727
1Phpmyfaq
1Phpmyfaq
May 13, 2026
Oct 22, 2017
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment.
CVE-2017-14619
1Phpmyfaq
1Phpmyfaq
May 13, 2026
Sep 20, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module.
CVE-2017-14618
1Phpmyfaq
1Phpmyfaq
May 13, 2026
Sep 20, 2017
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action.
CVE-2017-11187
1Phpmyfaq
1Phpmyfaq
May 13, 2026
Jul 12, 2017
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly.
CVE-2017-7579
1Phpmyfaq
1Phpmyfaq
May 13, 2026
Apr 7, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field.
CVE-2014-0814
1Phpmyfaq
1Phpmyfaq
Apr 29, 2026
Feb 14, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-0813
1Phpmyfaq
1Phpmyfaq
Apr 29, 2026
Feb 14, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site request forgery (CSRF) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to hijack the authentication of arbitrary users for requests that modify settings.
CVE-2010-4821
1Phpmyfaq
1Phpmyfaq
Apr 29, 2026
Oct 22, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
CVE-2011-4825
3Phpletter
PhpmyfaqTinymce
3Ajax File And Image Manager
PhpmyfaqTinymce
Apr 29, 2026
Dec 15, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allow...Show more
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinymce before 1.4.2, phpMyFAQ 2.6 before 2.6.19 and 2.7 before 2.7.1, and possibly other products, allows remote attackers to inject arbitrary PHP code into data.php via crafted parameters.Show less
CVE-2011-3783
1Phpmyfaq
1Phpmyfaq
Apr 29, 2026
Sep 24, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
phpMyFAQ 2.6.13 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lang/language_uk.php and certain ot...Show more
phpMyFAQ 2.6.13 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lang/language_uk.php and certain other files.Show less
CVE-2010-4558
1Phpmyfaq
1Phpmyfaq
Apr 29, 2026
Dec 17, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification (Trojan Horse) in the getTopTen method in inc/Faq.php, which allows remote attackers...Show more
phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification (Trojan Horse) in the getTopTen method in inc/Faq.php, which allows remote attackers to execute arbitrary PHP code.Show less