4.3

CVE-2005-3734

Exploit

Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters.

Data is provided by the National Vulnerability Database (NVD)
Phpmyfaq ≫ Phpmyfaq Version1.5
Phpmyfaq ≫ Phpmyfaq Version1.5.1
Phpmyfaq ≫ Phpmyfaq Version1.5.3
Phpmyfaq ≫ Phpmyfaq Version1.5_alpha1
Phpmyfaq ≫ Phpmyfaq Version1.5_alpha2
Phpmyfaq ≫ Phpmyfaq Version1.5_beta1
Phpmyfaq ≫ Phpmyfaq Version1.5_beta2
Phpmyfaq ≫ Phpmyfaq Version1.5_beta3
Phpmyfaq ≫ Phpmyfaq Version1.5_rc1
Phpmyfaq ≫ Phpmyfaq Version1.5_rc2
Phpmyfaq ≫ Phpmyfaq Version1.5_rc3
Phpmyfaq ≫ Phpmyfaq Version1.5_rc4
Phpmyfaq ≫ Phpmyfaq Version1.5_rc5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.71% 0.7
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N