CVE-2010-4821

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-10-22 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.

Affected products

thorsten phpMyFAQ: through 2.6.8; 1.0, 1.0.1, 1.0.1a, 1.1.0, 1.1.1, 1.1.2 (+112)

References

http://dl.packetstormsecurity.net/1009-exploits/phpmyfaq268-xss.txt
http://seclists.org/bugtraq/2010/Sep/207
http://secunia.com/advisories/41625
http://www.openwall.com/lists/oss-security/2012/03/08/2
http://www.openwall.com/lists/oss-security/2012/03/08/7
http://www.osvdb.org/68268
http://www.phpmyfaq.de/advisory_2010-09-28.php
https://exchange.xforce.ibmcloud.com/vulnerabilities/62092
http://dl.packetstormsecurity.net/1009-exploits/phpmyfaq268-xss.txt
http://seclists.org/bugtraq/2010/Sep/207
http://secunia.com/advisories/41625
http://www.openwall.com/lists/oss-security/2012/03/08/2

Get alerted when CVE-2010-4821 or the next vulnerability affects your stack