FreeBSD : phpmyfaq -- multiple vulnerabilities (6bacd9fd-ca56-11ed-bc52-589cfc0f81b0)

high Nessus Plugin ID 173401

Language:

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6bacd9fd-ca56-11ed-bc52-589cfc0f81b0 advisory.

- phpmyfaq developers report: XSS weak passwords privilege escalation Captcha bypass (6bacd9fd-ca56-11ed- bc52-589cfc0f81b0)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

See Also

https://huntr.dev/bounties/01d6ae23-3a8f-42a8-99f4-10246187d71b/

https://huntr.dev/bounties/0854328e-eb00-41a3-9573-8da8f00e369c/

https://huntr.dev/bounties/1dc7f818-c8ea-4f80-b000-31b48a426334/

https://huntr.dev/bounties/24c0a65f-0751-4ff8-af63-4b325ac8879f/

https://huntr.dev/bounties/2d0ac48a-490d-4548-8d98-7447042dd1b5/

https://huntr.dev/bounties/2f1e417d-cf64-4cfb-954b-3a9cb2f38191/

https://huntr.dev/bounties/39715aaf-e798-4c60-97c4-45f4f2cd5c61/

https://huntr.dev/bounties/3c2374cc-7082-44b7-a6a6-ccff7a650a3a/

https://huntr.dev/bounties/529f2361-eb2e-476f-b7ef-4e561a712e28/

https://huntr.dev/bounties/584a200a-6ff8-4d53-a3c0-e7893edff60c/

https://huntr.dev/bounties/882ffa07-5397-4dbb-886f-4626859d711a/

https://huntr.dev/bounties/8ab09a1c-cfd5-4ce0-aae3-d33c93318957/

https://huntr.dev/bounties/93f981a3-231d-460d-a239-bb960e8c2fdc/

https://huntr.dev/bounties/b7d244b7-5ac3-4964-81ee-8dbb5bb5e33a/

https://huntr.dev/bounties/bce84c02-abb2-474f-a67b-1468c9dcabb8/

https://huntr.dev/bounties/dda73cb6-9344-4822-97a1-2e31efb6a73e/

https://huntr.dev/bounties/e495b443-b328-42f5-aed5-d68b929b4cb9/

https://huntr.dev/bounties/e4a58835-96b5-412c-a17e-3ceed30231e1/

https://huntr.dev/bounties/e8109aed-d364-4c0c-9545-4de0347b10e1/

https://huntr.dev/bounties/ece5f051-674e-4919-b998-594714910f9e/

http://www.nessus.org/u?a4381339

Plugin Details

Severity: High

ID: 173401

File Name: freebsd_pkg_6bacd9fdca5611edbc52589cfc0f81b0.nasl

Version: 1.0

Type: local

Published: 3/24/2023

Updated: 3/24/2023

Supported Sensors: Nessus

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:phpmyfaq, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Exploit Ease: No known exploits are available

Patch Publication Date: 3/24/2023

Vulnerability Publication Date: 3/20/2023