Vulnerabilities

TI-2007-06331 CVE-2007-6635 · GHSA-3976-p95v-hcfq

FAQMasterFlexPlus, possibly 1.5 or 1.52, stores the admin password in cleartext in a…

LOW 30

FAQMasterFlexPlus, possibly 1.5 or 1.52, stores the admin password in cleartext in a database, which might allow context-dependent attackers to obtain the password via unspecified database access.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.00948 Published 2008-01-04 No fix listed CWE-310

TI-2007-06330 CVE-2007-6634 · GHSA-9rq7-7vjf-q2vv

Multiple SQL injection vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow…

LOW 32

Multiple SQL injection vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to execute arbitrary SQL commands via the category_id parameter to faq.php, and unspecified other vectors involvin…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0108 Published 2008-01-04 No fix listed CWE-89

TI-2007-06329 CVE-2007-6633 · GHSA-frj8-8qxp-g5ph

Multiple cross-site scripting (XSS) vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote attackers to inject arbitrary web script or HTML via (1) the cat_name parameter to faq.php; and unspecified par…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01734 Published 2008-01-04 No fix listed CWE-79

Vulnerabilities

Filters

FAQMasterFlexPlus, possibly 1.5 or 1.52, stores the admin password in cleartext in a…

Multiple SQL injection vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow…

Multiple cross-site scripting (XSS) vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or…