Description

Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters.

Remediation

References

CVE-2005-3734

Related Vulnerabilities

Internet Information Services Permissions, Privileges, and Access Controls Vulnerability (CVE-1999-1011)

WebLogic CVE-2020-2544 Vulnerability (CVE-2020-2544)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43712)

Internet Information Services Other Vulnerability (CVE-2002-1181)

Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2024-23326)

Severity

Medium

Classification

CVE-2005-3734

Tags

Missing Update Known Vulnerabilities