diff options
| author | Florian Smeets <flo@FreeBSD.org> | 2023-08-23 06:28:42 +0000 |
|---|---|---|
| committer | Florian Smeets <flo@FreeBSD.org> | 2023-08-23 06:32:25 +0000 |
| commit | 5a4fbec7d6a92ca5c0232f2d798506ac337f4743 (patch) | |
| tree | 00b8d1cd0911251ca1e4a90e4b543d8061fa2246 | |
| parent | c4eeb70cca5132eb677f22ce271a86b7c3098fa7 (diff) | |
security/vuxml: add phpmyfaq < 3.1.16
| -rw-r--r-- | security/vuxml/vuln/2023.xml | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml index b0135e1f951a..af7074dadc10 100644 --- a/security/vuxml/vuln/2023.xml +++ b/security/vuxml/vuln/2023.xml @@ -1,3 +1,33 @@ + <vuln vid="ddd3fcc9-2bdd-11ee-9af4-589cfc0f81b0"> + <topic>phpmyfaq -- multiple vulnerabilities</topic> + <affects> + <package> + <name>phpmyfaq-php80</name> + <name>phpmyfaq-php81</name> + <name>phpmyfaq-php82</name> + <name>phpmyfaq-php83</name> + <range><lt>3.1.16</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>phpmyfaq developers report:</p> + <blockquote cite="https://www.phpmyfaq.de/security/advisory-2023-07-16"> + <p>Cross Site Scripting vulnerability</p> + <p>CSV injection vulnerability</p> + </blockquote> + </body> + </description> + <references> + <url>https://huntr.dev/bounties/e891dcbc-2092-49d3-9518-23e37187a5ea/</url> + <url>https://huntr.dev/bounties/36149a42-cbd5-445e-a371-e351c899b189/</url> + </references> + <dates> + <discovery>2023-07-16</discovery> + <entry>2023-08-23</entry> + </dates> + </vuln> + <vuln vid="5666688f-803b-4cf0-9cb1-08c088f2225a"> <topic>chromium -- multiple vulnerabilities</topic> <affects> |