Cross-site Request Forgery (CSRF)

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the POST /admin/api/update-database endpoint, which executes database migrations without validating a CSRF token. Th...