Known vulnerabilities in phpMyFAQ - page 5

Software: phpMyFAQ
Software CPE: cpe:2.3:a:thorsten_rinne:phpmyfaq:*:*:*:*:*:*:*:*
Total vulnerabilities: 92
Public exploits: 12
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting phpMyFAQ phpMyFAQ is affected by 92 known vulnerabilities: 9 high, 37 medium, 46 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130105 - Information Exposure Through an Error Message
CVE-2024-54141
CWE-209 High
No
No
4.0.0 06.12.2024 SB2024020555
#VU130111 - Improper Access Control
CVE-2024-22208
CWE-284 Medium
No
No
4.0.0 05.02.2024 SB2024020555
#VU75702 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-2428
CWE-79 Low
No
No
3.1.13 03.05.2023 SB2023050343
#VU71381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0313
CWE-79 Low
No
No
3.1.10 20.01.2023 SB2023011928
#VU71359 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0314
CWE-79 Low
No
No
3.1.10 19.01.2023 SB2023011928
#VU71358 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0306
CWE-79 Low
No
No
3.1.10 19.01.2023 SB2023011928
#VU71357 - Weak Password Requirements
CVE-2023-0307
CWE-521 Medium
No
No
3.1.10 19.01.2023 SB2023011928
#VU71356 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0308
CWE-79 Low
No
No
3.1.10 19.01.2023 SB2023011928
#VU71355 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0309
CWE-79 Low
No
No
3.1.10 19.01.2023 SB2023011928
#VU71354 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0310
CWE-79 Low
No
No
3.1.10 19.01.2023 SB2023011928
#VU71348 - Improper Authentication
CVE-2023-0311
CWE-287 Medium
No
No
3.1.10 19.01.2023 SB2023011928
#VU71347 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0312
CWE-79 Low
No
No
3.1.10 19.01.2023 SB2023011928


Showing elements 81 - 100 out of 92