Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-11-20T19:00:00Z

Updated: 2024-09-16T16:23:01.897Z

Reserved: 2009-11-20T00:00:00Z

Link: CVE-2009-4040

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2009-11-20T19:30:00.937

Modified: 2021-07-23T15:04:56.060

Link: CVE-2009-4040

cve-icon Redhat

No data.