phpMyFAQ 関連製品全体の CVE とセキュリティ脆弱性情報を集約し、CVSS、EPSS、公開日、脆弱性情報データを掲載しています。
一般的な弱点パターンには vendor risk csrf、vendor risk sql injection、パス処理の欠陥, and vendor risk input validation があり、vendor surface production workloads and vendor surface software deployment の利用場面で vendor impact data exposure、ファイル上書き, and vendor impact unexpected behavior などのリスクが生じる可能性があります。
掲載データは公開脆弱性情報とセキュリティ公告に基づき、過去の暴露面と修補優先度の評価に利用できます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2023-5316 | Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18. | [email protected] | 6.1 | 0.42% | 2023-09-29 | 2026-06-17 |
| CVE-2023-5227 | Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8. | [email protected] | 9.8 | 0.52% | 2023-09-29 | 2026-06-17 |
| CVE-2023-4007 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.16. | [email protected] | 5.4 | 0.43% | 2023-07-30 | 2026-06-17 |
| CVE-2023-4006 | Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to 3.1.16. | [email protected] | 9.8 | 0.68% | 2023-07-30 | 2026-06-17 |
| CVE-2023-3469 | Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.2. | [email protected] | 4.8 | 0.58% | 2023-06-29 | 2026-06-17 |
| CVE-2023-2999 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14. | [email protected] | 6.1 | 0.48% | 2023-05-30 | 2026-06-17 |
| CVE-2023-2998 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14. | [email protected] | 6.1 | 0.52% | 2023-05-30 | 2026-06-17 |
| CVE-2023-2753 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta. | [email protected] | 5.4 | 0.55% | 2023-05-17 | 2026-06-17 |
| CVE-2023-2752 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta. | [email protected] | 5.4 | 0.52% | 2023-05-17 | 2026-06-17 |
| CVE-2023-2550 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13. | [email protected] | 4.8 | 0.46% | 2023-05-05 | 2026-06-17 |
| CVE-2023-2427 | Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.13. | [email protected] | 4.8 | 0.47% | 2023-05-05 | 2026-06-17 |
| CVE-2023-2429 | Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.13. | [email protected] | 9.8 | 0.51% | 2023-04-29 | 2026-06-17 |
| CVE-2023-2428 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13. | [email protected] | 5.4 | 0.56% | 2023-04-29 | 2026-06-17 |
| CVE-2023-1875 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | [email protected] | 5.4 | 0.48% | 2023-04-22 | 2026-06-17 |
| CVE-2023-1887 | Business Logic Errors in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | [email protected] | 4.3 | 0.70% | 2023-04-05 | 2026-06-17 |
| CVE-2023-1886 | Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | [email protected] | 7.3 | 0.88% | 2023-04-05 | 2026-06-17 |
| CVE-2023-1885 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | [email protected] | 6.3 | 0.48% | 2023-04-05 | 2026-06-17 |
| CVE-2023-1884 | Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | [email protected] | 6.1 | 0.45% | 2023-04-05 | 2026-06-17 |
| CVE-2023-1883 | Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | [email protected] | 5.4 | 0.49% | 2023-04-05 | 2026-06-17 |
| CVE-2023-1882 | Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.12. | [email protected] | 5.4 | 0.53% | 2023-04-05 | 2026-06-17 |