Missing Authorization

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Missing Authorization via the attachment download endpoint attachment.php due to a flawed permission check. The condition $groupPermission ||...