PT-2023-24980 · Phpmyfaq · Phpmyfaq

Published 2023-06-30 · Updated 2023-07-06 · CVE-2023-3469

Positive Technologies (AI Summary)

CVSS v3.1

5.2

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 3.2.0-beta.2

Description The issue is related to Cross-site Scripting (XSS) - Reflected. When an administrator restores a backup from a file, it's possible to trigger an error with a specially crafted file that can be displayed on the web page. Since the error message contains the invalid part of the file, any JavaScript code in the file is executed.

Recommendations For versions prior to 3.2.0-beta.2, update to version 3.2.0-beta.2 or later to resolve the issue. As a temporary workaround, consider restricting the ability to restore backups from files to minimize the risk of exploitation. Avoid using specially crafted files that can trigger errors and execute JavaScript code until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-3469

GHSA-V6G2-JWRM-H5R5

Affected Products

Phpmyfaq

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3469.json · Exploit
• 🔥 https://huntr.dev/bounties/3565cfc9-82c4-4db8-9b8f-494dd81b56ca · Exploit
• https://github.com/thorsten/phpmyfaq/commit/04a0183c25dd425f4c2bfb5f75b7650b932ae278 · Patch
• https://osv.dev/vulnerability/CVE-2023-3469 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-v6g2-jwrm-h5r5 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3469 · Security Note
• https://github.com/thorsten/phpMyFAQ · Note
• https://t.me/cvenotify/53349 · Telegram Post