dl.packetstormsecurity.net
http://dl.packetstormsecurity.net/1009-exploits/phpmyfaq268-xss.txt CVE-2010-4821
PHPMyFAQ 2.6.x - 'index.php' Cross-Site Scripting
Record summary
CVE-2010-4821 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBPHPMyFAQ 2.6.x - 'index.php' Cross-Site ScriptingExploitDB exploitby Yam MesickaNot analyzed1 file
References
920110928 Fwd: 2.6.6 <= phpMyFAQ <= 2.6.8 XSSmailing list
http://seclists.org/bugtraq/2010/Sep/207 41625Third-party advisory
http://secunia.com/advisories/41625 [oss-security] 20120308 CVE-request: phpMyFAQ index.php URI XSSmailing list
http://www.openwall.com/lists/oss-security/2012/03/08/2 [oss-security] 20120308 Re: CVE-request: phpMyFAQ index.php URI XSSmailing list
http://www.openwall.com/lists/oss-security/2012/03/08/7 68268vdb entry
http://www.osvdb.org/68268 phpmyfaq.deConfirmation
http://www.phpmyfaq.de/advisory_2010-09-28.php phpmyfaq-unspecified-xss(62092)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/62092 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2010-4821