CVE-2004-2257

phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request...

CVE-2004-2257

CVE-2004-2257 affects phpMyFAQ 1.4.0, where remote attackers can access the Image Manager and upload or delete images without authorization via a direct request. The connected sources corroborate an authentication bypass exposing image management functionality, with practical impact described as ...

phpMyFAQ Image Upload Authentication Bypass

The version of phpMyFAQ on the remote host contains a flaw that could allow an attacker without authorization to upload and delete arbitrary images on the remote host. An attacker may exploit this problem to deface the remote website. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...