CVE-2017-15731: Cross-Site Request Forgery (CSRF)

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/stat.adminlog.php...

CVE-2017-15731

CVE-2017-15731 affects phpMyFAQ prior to 2.9.9, with a CSRF vulnerability in admin/stat.adminlog.php. The issue arises from missing CSRF protections, potentially enabling unauthorized actions (e.g., deleting the admin log) via a crafted request in an authenticated session. Remediation: upgrade to...

CVE-2017-15731

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/stat.adminlog.php...

PT-2017-14162

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.9.9 Description The issue concerns Cross-Site Request Forgery CSRF in the admin/stat.adminlog.php file. Recommendations For versions prior to 2.9.9, update to version 2.9.9 or later to resolve the issue...