CVE-2010-4821: XSS
Published Oct 22, 2012
·Updated
Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php.
Affected Software
119 affected components
PhpMyFaq phpmyfaq=2.5.4
PhpMyFaq phpmyfaq=1.1.4
PhpMyFaq phpmyfaq=2.0.14
PhpMyFaq phpmyfaq=1.4.10
PhpMyFaq phpmyfaq=1.1.0
PhpMyFaq phpmyfaq=1.5.7
PhpMyFaq phpmyfaq=1.1.2
PhpMyFaq phpmyfaq=2.6.4
PhpMyFaq phpmyfaq=1.3.10
PhpMyFaq phpmyfaq=1.2.3
PhpMyFaq phpmyfaq=2.0.9
PhpMyFaq phpmyfaq=1.3.6
PhpMyFaq phpmyfaq=1.3.13
PhpMyFaq phpmyfaq=1.6.5
PhpMyFaq phpmyfaq=1.5-beta2
PhpMyFaq phpmyfaq=2.5.7
PhpMyFaq phpmyfaq=1.3.3
PhpMyFaq phpmyfaq=2.6.5
PhpMyFaq phpmyfaq=2.6.2
PhpMyFaq phpmyfaq=2.0.12
PhpMyFaq phpmyfaq=1.5.9
PhpMyFaq phpmyfaq=1.0.1
PhpMyFaq phpmyfaq=1.4-alpha2
PhpMyFaq phpmyfaq=1.5-beta3
PhpMyFaq phpmyfaq=1.6.11
PhpMyFaq phpmyfaq=1.5-rc2
PhpMyFaq phpmyfaq=1.6.9
PhpMyFaq phpmyfaq=2.6.7
PhpMyFaq phpmyfaq=2.5.2
PhpMyFaq phpmyfaq=1.5.1
PhpMyFaq phpmyfaq=2.0.4
PhpMyFaq phpmyfaq=2.5.3
PhpMyFaq phpmyfaq=1.3.7
PhpMyFaq phpmyfaq=1.3.9
PhpMyFaq phpmyfaq=1.4.0
PhpMyFaq phpmyfaq=1.6.10
PhpMyFaq phpmyfaq=1.5.3
PhpMyFaq phpmyfaq=1.3.11
PhpMyFaq phpmyfaq=2.0.3
PhpMyFaq phpmyfaq=2.5.5
PhpMyFaq phpmyfaq=2.0.6
PhpMyFaq phpmyfaq=1.4.3
PhpMyFaq phpmyfaq=1.4-alpha1
PhpMyFaq phpmyfaq=1.3.4
PhpMyFaq phpmyfaq=1.4.2
PhpMyFaq phpmyfaq=1.0.1a
PhpMyFaq phpmyfaq=2.0.5
PhpMyFaq phpmyfaq=1.3.8
PhpMyFaq phpmyfaq=1.1.3
PhpMyFaq phpmyfaq=2.0.11
PhpMyFaq phpmyfaq=1.5-rc3
PhpMyFaq phpmyfaq=1.1.5
PhpMyFaq phpmyfaq=1.4.6
PhpMyFaq phpmyfaq<=2.6.8
PhpMyFaq phpmyfaq=1.5-beta1
PhpMyFaq phpmyfaq=1.1.1
PhpMyFaq phpmyfaq=1.2.0
PhpMyFaq phpmyfaq=1.4.9
PhpMyFaq phpmyfaq=1.3.9-pl1
PhpMyFaq phpmyfaq=1.3.14
PhpMyFaq phpmyfaq=2.0.17
PhpMyFaq phpmyfaq=1.5.2
PhpMyFaq phpmyfaq=1.5.8
PhpMyFaq phpmyfaq=2.6.1
PhpMyFaq phpmyfaq=1.5-alpha2
PhpMyFaq phpmyfaq=1.4
PhpMyFaq phpmyfaq=1.6.2
PhpMyFaq phpmyfaq=1.2.5a
PhpMyFaq phpmyfaq=1.4.4
PhpMyFaq phpmyfaq=1.6.8
PhpMyFaq phpmyfaq=1.3.2
PhpMyFaq phpmyfaq=1.5-alpha1
PhpMyFaq phpmyfaq=1.4.8
PhpMyFaq phpmyfaq=1.5-rc4
PhpMyFaq phpmyfaq=1.4.0a
PhpMyFaq phpmyfaq=1.2.1
PhpMyFaq phpmyfaq=1.3.1
PhpMyFaq phpmyfaq=2.0.0
PhpMyFaq phpmyfaq=1.6.1
PhpMyFaq phpmyfaq=2.0.15
PhpMyFaq phpmyfaq=2.5.1
PhpMyFaq phpmyfaq=1.5.4
PhpMyFaq phpmyfaq=1.6.4
PhpMyFaq phpmyfaq=1.4.7
PhpMyFaq phpmyfaq=1.2.4
PhpMyFaq phpmyfaq=1.6.12
PhpMyFaq phpmyfaq=1.4.1
PhpMyFaq phpmyfaq=1.5-rc5
PhpMyFaq phpmyfaq=1.6.7
PhpMyFaq phpmyfaq=1.5.5
PhpMyFaq phpmyfaq=1.4.11
PhpMyFaq phpmyfaq=1.4.5
PhpMyFaq phpmyfaq=1.3.0
PhpMyFaq phpmyfaq=1.2.5b
PhpMyFaq phpmyfaq=2.6.3
PhpMyFaq phpmyfaq=1.5.0
PhpMyFaq phpmyfaq=1.1.4a
PhpMyFaq phpmyfaq=1.3.12
PhpMyFaq phpmyfaq=1.6.3
PhpMyFaq phpmyfaq=2.0.13
PhpMyFaq phpmyfaq=1.5.6
PhpMyFaq phpmyfaq=2.0.8
PhpMyFaq phpmyfaq=2.6.0
PhpMyFaq phpmyfaq=2.0.16
PhpMyFaq phpmyfaq=2.0.1
PhpMyFaq phpmyfaq=2.6.6
PhpMyFaq phpmyfaq=2.0.10
PhpMyFaq phpmyfaq=1.0
PhpMyFaq phpmyfaq=2.0.7
PhpMyFaq phpmyfaq=2.5.0
PhpMyFaq phpmyfaq=1.5
PhpMyFaq phpmyfaq=1.5-rc1
PhpMyFaq phpmyfaq=2.5.6
PhpMyFaq phpmyfaq=1.2.2
PhpMyFaq phpmyfaq=1.3.5
PhpMyFaq phpmyfaq=1.6.6
PhpMyFaq phpmyfaq=2.0.2
PhpMyFaq phpmyfaq=1.2.5
PhpMyFaq phpmyfaq=1.6.0
Event History
Oct 22, 2012
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4821?
The severity of CVE-2010-4821 is considered medium due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2010-4821?
To fix CVE-2010-4821, upgrade phpMyFAQ to version 2.6.9 or later.
3
What is the nature of the vulnerability described in CVE-2010-4821?
CVE-2010-4821 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML.
4
Which versions of phpMyFAQ are affected by CVE-2010-4821?
CVE-2010-4821 affects multiple versions of phpMyFAQ prior to 2.6.9.
5
Is there a workaround for CVE-2010-4821?
There is no official workaround for CVE-2010-4821; the recommended solution is to update to the latest version.