phpmyfaq/phpmyfaq

License

(LGPL-3.0 OR MIT)>=2.8.0-RC, <2.9.0-alpha3;

Unknown>=2.9.0-alpha3, <2.9.9;

MPL-2.0>=2.9.9;

Known vulnerabilities in the phpmyfaq/phpmyfaq package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Missing Authorization	<4.1.3
H Insecure Default Initialization of Resource	<4.1.3
H Weak Password Recovery Mechanism for Forgotten Password	<4.1.3
H Weak Password Recovery Mechanism for Forgotten Password	<4.1.3
H Incorrect Authorization	<4.1.2
H Directory Traversal	<4.1.2
M Cross-site Scripting (XSS)	<4.1.2
M Missing Authorization	<4.1.2
H Incorrect Authorization	<4.1.2
M Cross-site Scripting (XSS)	<4.1.2
M Incorrect Authorization	>=4.1.1, <4.1.2
M Cross-site Scripting (XSS)	<4.1.2
C Brute Force	<4.1.2
C SQL Injection	<4.1.2
H Improper Encoding or Escaping of Output	>=4.1.1, <4.1.2
H SQL Injection	<4.1.2
M Missing Authorization	<4.1.2
M Improper Neutralization of Special Elements in Data Query Logic	<4.1.1
H Directory Traversal	<4.1.1
M Cross-site Scripting (XSS)	<4.1.1
H Cross-site Scripting (XSS)	<4.1.1
M Cross-site Scripting (XSS)	<4.1.1
H SQL Injection	<4.0.14
M Cross-site Scripting (XSS)	>=3.2.10, <4.0.2
M Cross-site Scripting (XSS)	<2.9.9
M Cross-site Scripting (XSS)	<2.9.7
M Authentication Bypass	<2.9.7
H Cross-site Request Forgery (CSRF)	<2.9.11
H CSV Injection	<2.9.11