CVE-2009-4780: XSS
Multiple cross-site scripting (XSS) vulnerabilities in index.php in phpMyFAQ before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter in a sitemap action, (2) the search parameter in a search action, (3) the taggingid parameter in a search action, (4) the highlight parameter in an artikel action, (5) the artlang parameter in an artikel action, (6) the letter parameter in a sitemap action, (7) the lang parameter in a show action, (8) the cat parameter in a show action, (9) the newslang parameter in a news action, (10) the artlang parameter in a send2friend action, (11) the cat parameter in a send2friend action, (12) the id parameter in a send2friend action, (13) the srclang parameter in a translate action, (14) the id parameter in a translate action, (15) the cat parameter in a translate action, (16) the cat parameter in an add action, or (17) the question parameter in an add action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4780?
CVE-2009-4780 is categorized as a moderate severity vulnerability due to its potential impact on the application.
How do I fix CVE-2009-4780?
To fix CVE-2009-4780, upgrade to phpMyFAQ version 2.5.5 or later, which addresses the cross-site scripting vulnerabilities.
What types of vulnerabilities does CVE-2009-4780 include?
CVE-2009-4780 includes multiple cross-site scripting (XSS) vulnerabilities that allow attackers to inject arbitrary web scripts or HTML.
Which versions of phpMyFAQ are affected by CVE-2009-4780?
CVE-2009-4780 affects multiple versions of phpMyFAQ prior to 2.5.5.
What impact can CVE-2009-4780 have on my system?
Exploitation of CVE-2009-4780 can lead to unauthorized access to user data and potentially allow for malicious actions from the affected system.