The document describes how the author got their first CVE (Common Vulnerabilities and Exposures) by finding and reporting a stored cross-site scripting (XSS) vulnerability in the PHPMyFAQ framework. They tested a site using the framework, researched known issues, and did their own code analysis to discover an XSS in the question field when adding a new FAQ. They contacted the original team, provided steps to reproduce, and were eventually awarded CVE-2017-7579 for their finding.

1. How I Got My First CVE
By Noman Shaikh

2. Whoami
• Noman Shaikh
• Computer Science Student @ A.P College
• WebApp Sec
• Bugbaba.blogspot.com
• Reach me @nomanAli181

3. What is CVE (◑_◑)
Common Vulnerabilities and Exposures (CVE)
It is a dictionary of common names for publicly
known cyber security vulnerabilities.
~ http://cve.mitre.org

4. How Does It Helps ╍●‿●╍
• Used to identify a Bug on a worldwide level
• Makes easy to scan for exploits after Nmap
Scan 
• Boost your CV (>‿◠)✌

5. How To Get One ?
• Find a security Bug in a product
• Contact the vendor
• Wait for fix and update
• Ask for permission
• Ask for CVE from cveform.mitre.org

7. My Story ✍(◔◡◔)
• Found Stored XSS in PHPMyFAQ framework
• CVE-2017-7579
• http://www.phpmyfaq.de/security/advisory-
2017-04-02

8. But How Did I Did It :/
• While testing a site
• Found a subdomain that was using PHPMyFAQ
• I started looking for known bugs in this Framework
• Got CVE-2014-0814 that looked intresting
• But no proper discription
• What to do ?
• Contact the original team :P

10. • They replied with the poc
• But it didn’t worked with that site idk
why :/
• Next what to do :__: ?
• Either leave it or find a bug your self
• I choose the second option ;)

11. Did setup at my local machine
I didn’t wanted to put my time into this
So i decided to put scanners to do the work
Even After running them for days
Got nothing -_-

12. Next i know php basics so i thought i should do
Code analysis
It was coded using OOPS conecpt and i knew
procedural method only -,,,,,-
• The only option i was left is to check it myself
• There was a option `Proposal for a new FAQ`

13. The question field was vulnerable

14. You Don’t Belive Me :3
Steps to Reproduce :
• Login to admin account in one browser
• Open the site in another browser
• Click on AddFAQ option
• Fill the question field with payload
• Submit the form
• Go to admin dashboard in another browser and click on
articles
• Activate this FAQ
• Go back to site and refresh xss gets executed onmouseover

16. References :
• http://cve.mitre.org
• http://www.phpmyfaq.de/security/
• Chirag
• Dhiraj
• Sharavan
• Ishaq