EUVD-2017-7158

Malware in sbrugna...

CVE-2017-15735

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for modifying a glossary...

Cross site request forgery (csrf)

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for modifying a glossary...

CVE-2017-15735

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for modifying a glossary...

CVE-2017-15735

CVE-2017-15735 affects phpMyFAQ prior to 2.9.9, with a CSRF vulnerability that allows modification of glossary items. Multiple connected sources document CSRF for glossary updates (including PoC showing a form POST to admin/index.php?action=updateglossary while authenticated). The root cause desc...