Cross-site Request Forgery (CSRF)

phpmyfaq is vulnerable to cross-site request forgery CSRF. The library fails to implement any CSRF protection in the phpmyfaq/admin/ajax.config.php file, allowing a malicious user to send a request to create or delete a phpmyfaq instance...

CVE-2017-15808

In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php...

CVE-2017-15808

In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php...

CVE-2017-15808

In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php...

CVE-2017-15808

CVE-2017-15808 concerns phpMyFAQ prior to 2.9.9, where a cross‑site request forgery (CSRF) vulnerability exists in the admin/ajax.config.php endpoint. The included connected documents consistently describe a CSRF flaw in this file, enabling an attacker to trigger unauthorized operations from an a...

CVE-2017-15808: Cross-Site Request Forgery (CSRF)

In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php...

PT-2017-14238

Name of the Vulnerable Software and Affected Versions phpMyFaq versions prior to 2.9.9 Description The issue concerns a CSRF problem. It affects the admin/ajax.config.php file. Recommendations For versions prior to 2.9.9, update to version 2.9.9 or later to resolve the issue. As a temporary...