GCVE - cpe:2.3:a:phpmyfaq:phpmyfaq:1.5

Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyfaq:phpmyfaq:1.5_beta3:*:*:*:*:*:*:*

part: a version: 1.5_beta3 update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:composer/phpmyfaq/phpmyfaq`	purl2cpe	2026-06-01 10:12:06.515084
`pkg:docker/phpmyfaq/phpmyfaq`	purl2cpe	2026-06-01 10:12:06.515086
`pkg:github/thorsten/phpmyfaq`	purl2cpe	2026-06-01 10:12:06.515087
`pkg:rpm/opensuse/phpmyfaq`	purl2cpe	2026-06-01 10:12:06.515088

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-4040`	vulnerable	2026-06-08 04:51:46.664760	Details available Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page. Published: 2009-11-20T19:00:00.000Z Updated: 2024-09-16T16:23:01.897Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/3241 http://secunia.com/advisories/37354 http://www.phpmyfaq.de/advisory_2009-09-01.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3734`	vulnerable	2026-06-08 04:48:41.926746	Details available Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters. Published: 2005-11-22T00:00:00.000Z Updated: 2024-08-07T23:24:36.510Z Open on db.gcve.eu Reference links http://secunia.com/advisories/17649 http://securityreason.com/securityalert/196 http://www.phpmyfaq.de/advisory_2005-11-18.php http://www.osvdb.org/20989 http://www.securityfocus.com/bid/15504	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.