CVE-2017-15734

Summary: CVE-2017-15734 affects phpMyFAQ prior to 2.9.9 and is a CSRF in admin/stat.main.php. The vulnerability arises due to missing CSRF token validation in the affected action (e.g., clear-visits) within stat.main.php, allowing unauthorized state-changing requests when a user is authenticated....