Cross-site Request Forgery (CSRF)

phpmyfaq is vulnerable to cross-site request forgery CSRF. The library fails to implement any CSRF protection in the phpmyfaq/admin/ajax.config.php file, allowing a malicious user to send a request to create or delete a phpmyfaq instance...

CVE-2017-15808

In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php...

CVE-2017-15808

In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php...

CVE-2017-15808

CVE-2017-15808 concerns phpMyFAQ prior to 2.9.9, where a cross‑site request forgery (CSRF) vulnerability exists in the admin/ajax.config.php endpoint. The included connected documents consistently describe a CSRF flaw in this file, enabling an attacker to trigger unauthorized operations from an a...