|
253391
|
8.8 |
HIGH
Network
|
phpmyfaq
|
phpmyfaq
|
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.php.
|
CWE-352
Origin Validation Error
|
CVE-2017-15734
|
2024-11-21 12:15 |
2017-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253392
|
8.8 |
HIGH
Network
|
phpmyfaq
|
phpmyfaq
|
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and admin/att.main.php.
|
CWE-352
Origin Validation Error
|
CVE-2017-15733
|
2024-11-21 12:15 |
2017-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253393
|
8.8 |
HIGH
Network
|
phpmyfaq
|
phpmyfaq
|
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/news.php.
|
CWE-352
Origin Validation Error
|
CVE-2017-15732
|
2024-11-21 12:15 |
2017-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253394
|
8.8 |
HIGH
Network
|
phpmyfaq
|
phpmyfaq
|
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.adminlog.php.
|
CWE-352
Origin Validation Error
|
CVE-2017-15731
|
2024-11-21 12:15 |
2017-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253395
|
8.8 |
HIGH
Network
|
phpmyfaq
|
phpmyfaq
|
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php.
|
CWE-352
Origin Validation Error
|
CVE-2017-15730
|
2024-11-21 12:15 |
2017-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253396
|
8.8 |
HIGH
Network
|
phpmyfaq
|
phpmyfaq
|
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for adding a glossary.
|
CWE-352
Origin Validation Error
|
CVE-2017-15729
|
2024-11-21 12:15 |
2017-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253397
|
4.8 |
MEDIUM
Network
|
phpmyfaq
|
phpmyfaq
|
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via metaDescription or metaKeywords.
|
CWE-79
Cross-site Scripting
|
CVE-2017-15728
|
2024-11-21 12:15 |
2017-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253398
|
5.4 |
MEDIUM
Network
|
phpmyfaq
|
phpmyfaq
|
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment.
|
CWE-79
Cross-site Scripting
|
CVE-2017-15727
|
2024-11-21 12:15 |
2017-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253399
|
6.1 |
MEDIUM
Network
|
craftercms
|
crafter_cms
|
In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.
|
CWE-79
Cross-site Scripting
|
CVE-2017-15682
|
2024-11-21 12:14 |
2020-11-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
253400
|
9.8 |
CRITICAL
Network
|
craftercms
|
crafter_cms
|
In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.
|
CWE-22
Path Traversal
|
CVE-2017-15681
|
2024-11-21 12:14 |
2020-11-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|