A vulnerability classified as problematic was found in phpMyFAQ up to 2.9.6 (Content Management System). This vulnerability affects an unknown function of the file inc/PMF/Faq.php. The manipulation of the argument question with an unknown input leads to a cross site scripting vulnerability. The CWE definition for the vulnerability is CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. As an impact it is known to affect integrity. CVE summarizes:

inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field.

The bug was discovered 04/02/2017. The weakness was disclosed 04/07/2017 (Website). The advisory is available at phpmyfaq.de. This vulnerability was named CVE-2017-7579 since 04/07/2017. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1059.007 by the MITRE ATT&CK project.

The vulnerability was handled as a non-public zero-day exploit for at least 5 days. During that time the estimated underground price was around $0-$5k. By approaching the search of inurl:inc/PMF/Faq.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 2.9.7 eliminates this vulnerability.

Productinfo

Type

• Content Management System

Name

• phpMyFAQ

Version

• 2.9.0
• 2.9.1
• 2.9.2
• 2.9.3
• 2.9.4
• 2.9.5
• 2.9.6

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion