CVE-2024-28106— phpMyFAQ Stored XSS at FAQ News Content
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by CompromiseGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-28106
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
phpMyFAQ Stored XSS at FAQ News Content
Source: CVE Program / CVE List V5
Vulnerability Description
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. By manipulating the news parameter in a POST request, an attacker can inject malicious JavaScript code. Upon browsing to the compromised news page, the XSS payload triggers. This vulnerability is fixed in 3.2.6.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Vulnerability Title
phpMyFAQ 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
phpMyFAQ是Thorsten Rinne个人开发者的一个多语言、完全由数据库驱动的常见问题解答系统。 phpMyFAQ 存在安全漏洞，该漏洞源于 news 参数存在跨站脚本漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-28106
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-28106
请登录查看更多情报信息。
Patches & Fixes for CVE-2024-28106 (1)
Vendor Advisories for CVE-2024-28106 (1)
- https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-6p68-36m6-392rx_refsource_CONFIRM
Same Patch Batch · thorsten · 2024-03-25 · 7 CVEs total
| CVE-2024-27299 | 8.8 HIGH | phpMyFAQ SQL Injection at "Save News" |
| CVE-2024-28107 | 8.8 HIGH | phpMyFAQ SQL injections at insertentry & saveentry |
| CVE-2024-28105 | 7.2 HIGH | phpMyFAQ's File Upload Bypass at Category Image Leads to RCE |
| CVE-2024-27300 | 5.5 MEDIUM | phpMyFAQ Stored XSS at user email |
| CVE-2024-28108 | 4.7 MEDIUM | phpMyFAQ Stored HTML Injection at contentLink |
| CVE-2024-29179 | phpMyFAQ Stored Cross-site Scripting at File Attachments |
IV. Related Vulnerabilities
Same product: phpMyFAQ
- CVE-2026-66399
phpMyFAQ before 4.1.6 Privilege Escalation via Group Members - CVE-2026-66398
phpMyFAQ before 4.1.6 Remote Code Execution via Configuratio - CVE-2026-66397
phpMyFAQ before 4.1.6 Path Traversal via category image dele - CVE-2026-57996
phpMyFAQ - Privilege Escalation via Missing SuperAdmin Guard - CVE-2026-57994
phpMyFAQ - Information Disclosure of Inactive FAQ Content vi
Same vendor: thorsten
- CVE-2026-66399
phpMyFAQ before 4.1.6 Privilege Escalation via Group Members - CVE-2026-66398
phpMyFAQ before 4.1.6 Remote Code Execution via Configuratio - CVE-2026-66397
phpMyFAQ before 4.1.6 Path Traversal via category image dele - CVE-2026-49205
phpMyFAQ: Missing userHasPermission() in 4 API write endpoin - CVE-2026-48488
phpMyFAQ has Weak Cryptography - SHA1 for Password Hashing
Same weakness: CWE-79
- CVE-2026-46594
Reflected XSS in PHP Poll Script - CVE-2026-56672
ComfyUI: Stored XSS via /userdata/{file} due to Missing Cont - CVE-2026-56670
ComfyUI: Stored XSS via SVG file upload on the /view endpoin - CVE-2026-66421
OpenClaw Dashboard Stored XSS via lastMessage Session Field - CVE-2026-61526
AdonisJS HTTP Server is vulnerable to reflected XSS through
V. Comments for CVE-2024-28106
No comments yet