From nobody Fri Mar 24 18:17:53 2023 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Pjr6T6vbqz40vTh; Fri, 24 Mar 2023 18:17:53 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Pjr6T6F06z4XbR; Fri, 24 Mar 2023 18:17:53 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1679681873; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=CJf/jNBP8BoqCxy1o5wcoPk5iNoUJ72VkbNJy1iRs2g=; b=jtZHKW3mp2CbTSVT7g7thfyz+BTEfmFKcGOSFuw5sYL0c9f/emylOp8TTbq5DVdQACKH1c Dl+ta7iHC5hbtDxInFg2Q7YtLMGW42hfU8Mn+dBUDa5WnN1escIIYWqxHggnfE70mwtpzu wQRRtmvaPVn8DqyJ9sr8pjugumd5yyCEPx+eS1+0IOtx5TjIDj4+nd7Qbq7IKuJuQ/jHHC B8yuB0DMiMEZiJtJA0idr0D7TIomyDkaIzP/LP+oOqObEgklqBtJbXnLsq6lINWF809MdI immY3x4uBNX4/g1ry8iOFNah2QK9uM/BQ7MQcMjmDLtqGll71T+FfR2QSLwhgQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1679681873; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=CJf/jNBP8BoqCxy1o5wcoPk5iNoUJ72VkbNJy1iRs2g=; b=uX5gYn+CWaWp3ytI58W80pHn1TYXz+ZbwaUt0SMgTNgI5XCl8IOgSyJARJUYCLI50CXEyQ c/TdBvJPkHt9lT52eO+BTL/7y0QHHZ03bIDvyaSzpmnQVilc0OOoFBT0E9J+txFKHIf4Yv IAQz8+GqedTJHLY3ODxZQkQZG0sXSsAs4uH0CAZdeaTHijmDTP/IykRFhiRD4ErkpNDzXJ nAExxiq0v3aEW2AMeH4RllsA0+hl2GHDZT+Wkgyoix9IgGO1yyPp/ZQYL8kFZ/EpCQ72tf GCdq1JU0gqpchm+Ait2HIfzoRpJG9u44Tqnm/5wZ4Azzo/Hk+aAQKo20tHxA3w== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1679681873; a=rsa-sha256; cv=none; b=Xnbpaa9n4IQKpMGj/YQ5N78wvGuxUi1JLJEg5hAnKwO1tccawsl/1dX7xtFNRaQ4wC1N6x l2UCcqLyitxw+VFTFhNARA+M0CWSz0BQE8JMRkoBLAeWjQCTETd7ihmfrFgN8JsazOCKCe 2HD5Dv2P7jZHpofh9AH+qpmWVfLzoufQ9wSWb6+y2vpWnM7Fg9tSoeHMqfiR5iyG9JG3jc v/wGlWUkSWR9Ne59R7tq76P3tqoy0+JCV078dkpfvPDTOE3rydkkkvQpRGPPsCe0jzgpbD INCnrAoArxyM9EsyseHhFl3CFWwxBCpCcPp73IHzimT24m1cWytaLxr+Pswfyw== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Pjr6T5HRTzSqq; Fri, 24 Mar 2023 18:17:53 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 32OIHrDI025730; Fri, 24 Mar 2023 18:17:53 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 32OIHrxb025729; Fri, 24 Mar 2023 18:17:53 GMT (envelope-from git) Date: Fri, 24 Mar 2023 18:17:53 GMT Message-Id: <202303241817.32OIHrxb025729@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Florian Smeets Subject: git: 0062b5524a98 - main - security/vuxml: phpmyfaq vulnerabilities List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-all@freebsd.org X-BeenThere: dev-commits-ports-all@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: flo X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 0062b5524a98483432b0bdbfed8f9e966fe715d3 Auto-Submitted: auto-generated X-ThisMailContainsUnwantedMimeParts: N The branch main has been updated by flo: URL: https://cgit.FreeBSD.org/ports/commit/?id=0062b5524a98483432b0bdbfed8f9e966fe715d3 commit 0062b5524a98483432b0bdbfed8f9e966fe715d3 Author: Florian Smeets AuthorDate: 2023-03-24 15:19:33 +0000 Commit: Florian Smeets CommitDate: 2023-03-24 18:16:54 +0000 security/vuxml: phpmyfaq vulnerabilities --- security/vuxml/vuln/2023.xml | 47 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml index 7437974a99ed..7f201e14be54 100644 --- a/security/vuxml/vuln/2023.xml +++ b/security/vuxml/vuln/2023.xml @@ -1,3 +1,50 @@ + + phpmyfaq -- multiple vulnerabilities + + + phpmyfaq + 3.1.12 + + + + +

phpmyfaq developers report:

+
+

XSS

+

weak passwords

+

privilege escalation

+

Captcha bypass

+
+ + + + https://huntr.dev/bounties/e8109aed-d364-4c0c-9545-4de0347b10e1/ + https://huntr.dev/bounties/39715aaf-e798-4c60-97c4-45f4f2cd5c61/ + https://huntr.dev/bounties/01d6ae23-3a8f-42a8-99f4-10246187d71b/ + https://huntr.dev/bounties/dda73cb6-9344-4822-97a1-2e31efb6a73e/ + https://huntr.dev/bounties/529f2361-eb2e-476f-b7ef-4e561a712e28/ + https://huntr.dev/bounties/1dc7f818-c8ea-4f80-b000-31b48a426334/ + https://huntr.dev/bounties/e495b443-b328-42f5-aed5-d68b929b4cb9/ + https://huntr.dev/bounties/ece5f051-674e-4919-b998-594714910f9e/ + https://huntr.dev/bounties/93f981a3-231d-460d-a239-bb960e8c2fdc/ + https://huntr.dev/bounties/e4a58835-96b5-412c-a17e-3ceed30231e1/ + https://huntr.dev/bounties/b7d244b7-5ac3-4964-81ee-8dbb5bb5e33a/ + https://huntr.dev/bounties/24c0a65f-0751-4ff8-af63-4b325ac8879f/ + https://huntr.dev/bounties/3c2374cc-7082-44b7-a6a6-ccff7a650a3a/ + https://huntr.dev/bounties/0854328e-eb00-41a3-9573-8da8f00e369c/ + https://huntr.dev/bounties/2f1e417d-cf64-4cfb-954b-3a9cb2f38191/ + https://huntr.dev/bounties/584a200a-6ff8-4d53-a3c0-e7893edff60c/ + https://huntr.dev/bounties/bce84c02-abb2-474f-a67b-1468c9dcabb8/ + https://huntr.dev/bounties/882ffa07-5397-4dbb-886f-4626859d711a/ + https://huntr.dev/bounties/8ab09a1c-cfd5-4ce0-aae3-d33c93318957/ + https://huntr.dev/bounties/2d0ac48a-490d-4548-8d98-7447042dd1b5/ + + + 2023-03-20 + 2023-03-24 + + + OpenSSL -- Excessive Resource Usage Verifying X.509 Policy Constraints