Phpmyfaq: >> Phpmyfaq >> 1.5 Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters.
CVSS Score
4.3
EPSS Score
0.007
Published
2005-11-22
SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages.
CVSS Score
5.0
EPSS Score
0.003
Published
2005-03-07
Page 12