CVE-2014-0814

Phpmyfaq < 2.8.5 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (6)

[Patch, Vendor Advisory] http://www.phpmyfaq.de/advisory_2014-02-04.php

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/65368

[Third Party Advisory, VDB Entry] http://osvdb.org/102940

[Third Party Advisory] http://secunia.com/advisories/56006

[Third Party Advisory] http://jvn.jp/en/jp/JVN30050348/index.html

[Third Party Advisory] http://jvndb.jvn.jp/jvndb/JVNDB-2014-000015

Scores

EPSS 0.0053

EPSS Percentile 67.1%

Details

CWE

CWE-79

Status published

Products (50)

phpmyfaq/phpmyfaq < 2.8.5

phpmyfaq/phpmyfaq

... and 40 more

Published Feb 14, 2014

Tracked Since Feb 18, 2026