CVE-2009-4040: XSS
Published Nov 20, 2009
·Updated
Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page.
Affected Software
117 affected components
PhpMyFaq phpmyfaq<=2.0.16
PhpMyFaq phpmyfaq=0.60
PhpMyFaq phpmyfaq=0.65
PhpMyFaq phpmyfaq=0.70
PhpMyFaq phpmyfaq=0.80
PhpMyFaq phpmyfaq=0.80a
PhpMyFaq phpmyfaq=0.85
PhpMyFaq phpmyfaq=0.86
PhpMyFaq phpmyfaq=0.87
PhpMyFaq phpmyfaq=0.90
PhpMyFaq phpmyfaq=0.95
PhpMyFaq phpmyfaq=0.666
PhpMyFaq phpmyfaq=1.0
PhpMyFaq phpmyfaq=1.0.1
PhpMyFaq phpmyfaq=1.0.1a
PhpMyFaq phpmyfaq=1.1.0
PhpMyFaq phpmyfaq=1.1.1
PhpMyFaq phpmyfaq=1.1.2
PhpMyFaq phpmyfaq=1.1.3
PhpMyFaq phpmyfaq=1.1.4
PhpMyFaq phpmyfaq=1.1.4a
PhpMyFaq phpmyfaq=1.1.5
PhpMyFaq phpmyfaq=1.2.0
PhpMyFaq phpmyfaq=1.2.1
PhpMyFaq phpmyfaq=1.2.2
PhpMyFaq phpmyfaq=1.2.3
PhpMyFaq phpmyfaq=1.2.4
PhpMyFaq phpmyfaq=1.2.5
PhpMyFaq phpmyfaq=1.2.5a
PhpMyFaq phpmyfaq=1.2.5b
PhpMyFaq phpmyfaq=1.3.0
PhpMyFaq phpmyfaq=1.3.1
PhpMyFaq phpmyfaq=1.3.2
PhpMyFaq phpmyfaq=1.3.3
PhpMyFaq phpmyfaq=1.3.4
PhpMyFaq phpmyfaq=1.3.5
PhpMyFaq phpmyfaq=1.3.6
PhpMyFaq phpmyfaq=1.3.7
PhpMyFaq phpmyfaq=1.3.8
PhpMyFaq phpmyfaq=1.3.9
PhpMyFaq phpmyfaq=1.3.9pl1
PhpMyFaq phpmyfaq=1.3.10
PhpMyFaq phpmyfaq=1.3.11
PhpMyFaq phpmyfaq=1.3.12
PhpMyFaq phpmyfaq=1.3.13
PhpMyFaq phpmyfaq=1.3.14
PhpMyFaq phpmyfaq=1.4
PhpMyFaq phpmyfaq=1.4.0
PhpMyFaq phpmyfaq=1.4.0a
PhpMyFaq phpmyfaq=1.4.1
PhpMyFaq phpmyfaq=1.4.2
PhpMyFaq phpmyfaq=1.4.3
PhpMyFaq phpmyfaq=1.4.4
PhpMyFaq phpmyfaq=1.4.5
PhpMyFaq phpmyfaq=1.4.6
PhpMyFaq phpmyfaq=1.4.7
PhpMyFaq phpmyfaq=1.4.8
PhpMyFaq phpmyfaq=1.4.9
PhpMyFaq phpmyfaq=1.4.10
PhpMyFaq phpmyfaq=1.4.11
PhpMyFaq phpmyfaq=1.4_alpha1
PhpMyFaq phpmyfaq=1.4_alpha2
PhpMyFaq phpmyfaq=1.4a
PhpMyFaq phpmyfaq=1.5
PhpMyFaq phpmyfaq=1.5-rc1
PhpMyFaq phpmyfaq=1.5-rc2
PhpMyFaq phpmyfaq=1.5-rc3
PhpMyFaq phpmyfaq=1.5-rc4
PhpMyFaq phpmyfaq=1.5-rc5
PhpMyFaq phpmyfaq=1.5.0
PhpMyFaq phpmyfaq=1.5.1
PhpMyFaq phpmyfaq=1.5.2
PhpMyFaq phpmyfaq=1.5.3
PhpMyFaq phpmyfaq=1.5.4
PhpMyFaq phpmyfaq=1.5.5
PhpMyFaq phpmyfaq=1.5.6
PhpMyFaq phpmyfaq=1.5.7
PhpMyFaq phpmyfaq=1.5.8
PhpMyFaq phpmyfaq=1.5.9
PhpMyFaq phpmyfaq=1.5_alpha1
PhpMyFaq phpmyfaq=1.5_alpha2
PhpMyFaq phpmyfaq=1.5_beta1
PhpMyFaq phpmyfaq=1.5_beta2
PhpMyFaq phpmyfaq=1.5_beta3
PhpMyFaq phpmyfaq=1.6.0
PhpMyFaq phpmyfaq=1.6.1
PhpMyFaq phpmyfaq=1.6.2
PhpMyFaq phpmyfaq=1.6.3
PhpMyFaq phpmyfaq=1.6.4
PhpMyFaq phpmyfaq=1.6.5
PhpMyFaq phpmyfaq=1.6.6
PhpMyFaq phpmyfaq=1.6.7
PhpMyFaq phpmyfaq=1.6.8
PhpMyFaq phpmyfaq=1.6.9
PhpMyFaq phpmyfaq=1.6.10
PhpMyFaq phpmyfaq=1.6.11
PhpMyFaq phpmyfaq=1.6.12
PhpMyFaq phpmyfaq=2.0.0
PhpMyFaq phpmyfaq=2.0.1
PhpMyFaq phpmyfaq=2.0.2
PhpMyFaq phpmyfaq=2.0.3
PhpMyFaq phpmyfaq=2.0.4
PhpMyFaq phpmyfaq=2.0.5
PhpMyFaq phpmyfaq=2.0.6
PhpMyFaq phpmyfaq=2.0.7
PhpMyFaq phpmyfaq=2.0.8
PhpMyFaq phpmyfaq=2.0.9
PhpMyFaq phpmyfaq=2.0.10
PhpMyFaq phpmyfaq=2.0.11
PhpMyFaq phpmyfaq=2.0.12
PhpMyFaq phpmyfaq=2.0.13
PhpMyFaq phpmyfaq=2.0.14
PhpMyFaq phpmyfaq=2.0.15
PhpMyFaq phpmyfaq=2.5.0
PhpMyFaq phpmyfaq=2.5.1
Microsoft Internet Explorer=6
Microsoft Internet Explorer=7
Remediation
Patch Available
Event History
Nov 20, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
07:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4040?
CVE-2009-4040 is classified as a moderate severity cross-site scripting (XSS) vulnerability.
2
How can I fix CVE-2009-4040?
To fix CVE-2009-4040, upgrade to phpMyFAQ version 2.0.17 or 2.5.2 or later.
3
Which versions of phpMyFAQ are affected by CVE-2009-4040?
CVE-2009-4040 affects all versions of phpMyFAQ prior to 2.0.17 and 2.5.2.
4
Does CVE-2009-4040 affect Internet Explorer?
Yes, CVE-2009-4040 specifically affects phpMyFAQ when used with Internet Explorer 6 or 7.
5
What type of attack does CVE-2009-4040 enable?
CVE-2009-4040 allows remote attackers to inject arbitrary web script or HTML into the search page.