CVE-2014-6046

CVE-2014-6046 affects phpMyFAQ prior to 2.8.13. The root cause is lack of CSRF token validation, enabling CSRF to perform actions such as deleting active users, deleting/opening questions, activating users, publishing FAQs, managing Glossary/FAQ news, and adding/deleting comments or votes. The im...