Lucene search
Veracode Vulnerability DatabaseVERACODE:46080HistoryMar 29, 2024 - 9:12 a.m.
HTML Injection
2024-03-2909:12:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
html injection
phpmyfaq
validation vulnerability
contentlink parameter
security
CVSS3
4.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7
Confidence
Low
EPSS
0
Percentile
9.0%
phpmyfaq is vulnerable to HTML injection. The vulnerability is due to insufficient validation on the contentLink parameter, this allowing an attacker to inject HTML code that can affect other users.
Related
nvd
nvd
CVE-2024-28108
2024-03-25 19:15:58
vulnrichment
vulnrichment
CVE-2024-28108 phpMyFAQ Stored HTML Injection at contentLink
2024-03-25 18:52:19
cve
cve
CVE-2024-28108
2024-03-25 19:15:58
cvelist
cvelist
CVE-2024-28108 phpMyFAQ Stored HTML Injection at contentLink
2024-03-25 18:52:19
osv
osv
CVE-2024-28108
2024-03-25 19:15:58
phpMyFAQ Stored HTML Injection at contentLink
2024-03-25 19:45:23
github
github
phpMyFAQ Stored HTML Injection at contentLink
2024-03-25 19:45:23
openvas
openvas
phpMyFAQ < 3.2.6 Multiple Vulnerabilities
2024-03-26 00:00:00
CVSS3
4.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7
Confidence
Low
EPSS
0
Percentile
9.0%
Related for VERACODE:46080