Description
Cross-site request forgery (CSRF) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to hijack the authentication of arbitrary users for requests that modify settings.
References (7)
Core 7
Core References
Third Party Advisory third-party-advisory
x_refsource_jvn
http://jvn.jp/en/jp/JVN50943964/index.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/102939
Third Party Advisory third-party-advisory
x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000016
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/65368
Patch, Vendor Advisory x_refsource_confirm
http://www.phpmyfaq.de/advisory_2014-02-04.php
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/56006
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/90963
Scores
EPSS
0.0107
EPSS Percentile
60.9%
Details
CWE
CWE-352
Status
published
Products (47)
phpmyfaq/phpmyfaq
1.0
phpmyfaq/phpmyfaq
1.0.1
phpmyfaq/phpmyfaq
1.0.1a
phpmyfaq/phpmyfaq
1.1.0
phpmyfaq/phpmyfaq
1.1.1
phpmyfaq/phpmyfaq
1.1.2
phpmyfaq/phpmyfaq
1.1.3
phpmyfaq/phpmyfaq
1.1.4
phpmyfaq/phpmyfaq
1.1.4a
phpmyfaq/phpmyfaq
1.1.5
... and 37 more
Published
Feb 14, 2014
Tracked Since
Feb 18, 2026