Thorsten Rinne phpMyFAQ Permission and Access Control Vulnerabilities

Thorsten Rinne’s phpMyFAQ 4.2.0-alpha to 4.2.0-beta versions contained vulnerabilities related to permission checks and access control. These vulnerabilities stemmed from a flaw in GroupController::deleteGroup, which lacked authorization verification. No check was performed to determine the group...