https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:08:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-207110 EUVD-2026-207110 https://cve.radiocsirt.org/vuln/euvd-2026-207110 https://cve.radiocsirt.org/vuln/fkie_cve-2024-55889 <p>phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim&#39;s machine upon page visit by embedding it in an &lt;iframe&gt; element without user interaction or explicit consent. Version 3.2.10 fixes the issue.</p> <p>phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim&#39;s machine upon page visit by embedding it in an &lt;iframe&gt; element without user interaction or explicit consent. Version 3.2.10 fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-55889 https://cve.radiocsirt.org/vuln/ghsa-m3r7-8gw7-qwvc <p><strong>Affected:</strong> Packagist: thorsten/phpmyfaq</p> <p>### Summary A vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim&#39;s machine upon page visit by embedding it in an &lt;iframe&gt; element without user interaction or explicit consent.</p> <p>### Details In http://localhost/admin/index.php?action=editentry&amp;id=20&amp;lang=en, where a FAQ record is either created or edited, an attacker can insert an iframe, as &#34;source code&#34;, pointing to a prior &#34;malicious&#34; attachment that the attacker has uploaded via FAQ &#34;new attachment&#34; upload, such that any page visits to this FAQ will trigger an automated download (from the edit screen, download is automated; from the faq page view as a normal user, depending on the browser, a pop up confirmation may be presented before the actual download. Firebox browser, for instance, does not require any interactions). </p> <p>### PoC</p> <p>1. create a new FAQ record and upload a &#34;malicious&#34; file - in my case, I uploaded an eicar file. take note of the uri, ie &lt;p&gt;&lt;iframe &#34;index.php?action=attachment&amp;amp;id=2&#34; </p> <p>3. in the FAQ record, insert a &#34;source code&#34; blob using the &#34;&lt; &gt;&#34; button 4. insert in the following snippet: &lt;p&gt;&lt;iframe src=&#34;index.php?action=attachment&amp;amp;id=2&#34;&gt;&lt;/iframe&gt;&lt;/p&gt; and save FAQ record 5. once the edit page reloads, the malicious code will be downloaded onto the local mach…</p> <p><strong>Affected:</strong> Packagist: thorsten/phpmyfaq</p> <p>### Summary A vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim&#39;s machine upon page visit by embedding it in an &lt;iframe&gt; element without user interaction or explicit consent.</p> <p>### Details In http://localhost/admin/index.php?action=editentry&amp;id=20&amp;lang=en, where a FAQ record is either created or edited, an attacker can insert an iframe, as &#34;source code&#34;, pointing to a prior &#34;malicious&#34; attachment that the attacker has uploaded via FAQ &#34;new attachment&#34; upload, such that any page visits to this FAQ will trigger an automated download (from the edit screen, download is automated; from the faq page view as a normal user, depending on the browser, a pop up confirmation may be presented before the actual download. Firebox browser, for instance, does not require any interactions). </p> <p>### PoC</p> <p>1. create a new FAQ record and upload a &#34;malicious&#34; file - in my case, I uploaded an eicar file. take note of the uri, ie &lt;p&gt;&lt;iframe &#34;index.php?action=attachment&amp;amp;id=2&#34; </p> <p>3. in the FAQ record, insert a &#34;source code&#34; blob using the &#34;&lt; &gt;&#34; button 4. insert in the following snippet: &lt;p&gt;&lt;iframe src=&#34;index.php?action=attachment&amp;amp;id=2&#34;&gt;&lt;/iframe&gt;&lt;/p&gt; and save FAQ record 5. once the edit page reloads, the malicious code will be downloaded onto the local mach…</p> https://cve.radiocsirt.org/vuln/ghsa-m3r7-8gw7-qwvc