Lucene search
China National Vulnerability DatabaseCNVD-2023-83076HistoryNov 02, 2023 - 12:00 a.m.
phpMyFAQ Access Control Error Vulnerability
2023-11-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
phpmyfaq
multi-language
faq system
access control
vulnerability
session expiration
old sessions
attack
phpMyFAQ is a multi-language, fully database-driven FAQ system. An access control error vulnerability exists in versions prior to phpMyFAQ 3.2.2, which stems from the presence of insufficient session expiration. An attacker can exploit this vulnerability to still use old sessions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpmyfaq phpmyfaq | lt | 3.2.2 |
Related
nvd
nvd
CVE-2023-5865
2023-10-31 01:15:07
github
github
Insufficient Session Expiration in thorsten/phpmyfaq
2023-10-31 03:31:22
cvelist
cvelist
CVE-2023-5865 Insufficient Session Expiration in thorsten/phpmyfaq
2023-10-31 00:00:40
veracode
veracode
Insufficient Session Expiration
2023-11-01 03:57:18
huntr
huntr
Insufficient Session Expiration
2023-09-22 09:44:11
prion
prion
Session fixation
2023-10-31 01:15:00
cve
cve
CVE-2023-5865
2023-10-31 01:15:07
osv
osv
Insufficient Session Expiration in thorsten/phpmyfaq
2023-10-31 03:31:22
CVE-2023-5865
2023-10-31 01:15:07
nessus
nessus
freebsd
freebsd
phpmyfaq -- multiple vulnerabilities
2023-10-31 00:00:00
openvas
openvas
phpMyFAQ < 3.2.2 Multiple Vulnerabilities
2023-11-02 00:00:00