Vulnerabilities > FAQ O Matic

DATE CVE VULNERABILITY TITLE RISK
2006-01-18 CVE-2006-0251 Cross-Site Scripting vulnerability in Faq-O-Matic
Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web script or HTML via the (1) _duration, (2) file, and (3) cmd parameters.
network
faq-o-matic
4.3
2002-05-16 CVE-2002-0230 Cross-Site Scripting vulnerability in Faq-O-Matic 2.712
Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message.
network
low complexity
faq-o-matic
5.0