CVE-2017-15732

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/news.php...

CVE-2017-15732

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/news.php...

CVE-2017-15731

CVE-2017-15731 affects phpMyFAQ prior to 2.9.9, with a CSRF vulnerability in admin/stat.adminlog.php. The issue arises from missing CSRF protections, potentially enabling unauthorized actions (e.g., deleting the admin log) via a crafted request in an authenticated session. Remediation: upgrade to...

CVE-2017-15735

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for modifying a glossary...

CVE-2017-15730

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/stat.ratings.php...

CVE-2017-15729

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for adding a glossary...

CVE-2017-15733

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/ajax.attachment.php and admin/att.main.php...

CVE-2017-15729

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for adding a glossary...

CVE-2017-15734

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/stat.main.php...

CVE-2017-15732

In phpMyFAQ (versions before 2.9.9), there is a Cross-Site Request Forgery (CSRF) vulnerability in admin/news.php due to missing CSRF protection. This affects the news-management functionality and can allow an attacker to perform unauthorized operations (e.g., actions on news entries) without use...

CVE-2017-15734

Summary: CVE-2017-15734 affects phpMyFAQ prior to 2.9.9 and is a CSRF in admin/stat.main.php. The vulnerability arises due to missing CSRF token validation in the affected action (e.g., clear-visits) within stat.main.php, allowing unauthorized state-changing requests when a user is authenticated....

CVE-2017-15735

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF for modifying a glossary...

PT-2017-14161

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.9.9 Description The issue concerns Cross-Site Request Forgery CSRF in the admin/stat.ratings.php file. Recommendations For versions prior to 2.9.9, update to version 2.9.9 or later to resolve the issue...

PT-2017-14159

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.9.9 Description The issue concerns Stored Cross-site Scripting XSS that can be achieved through the metaDescription or metaKeywords fields. Recommendations For versions prior to 2.9.9, update to version 2.9.9 or...

PT-2017-14158

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.9.9 Description The issue concerns Stored Cross-site Scripting XSS that can be achieved via an HTML attachment. Recommendations For versions prior to 2.9.9, update to version 2.9.9 or later to resolve the issue...

PT-2017-14163

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.9.9 Description The issue concerns Cross-Site Request Forgery CSRF in the admin/news.php file. Recommendations For versions prior to 2.9.9, update to version 2.9.9 or later to resolve the issue...

PT-2017-14160

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.9.9 Description The issue concerns Cross-Site Request Forgery CSRF that allows for the addition of a glossary. Recommendations For versions prior to 2.9.9, update to version 2.9.9 or later to resolve the issue...

PT-2017-14166

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.9.9 Description The issue allows for Cross-Site Request Forgery CSRF that can be used to modify a glossary. Recommendations For versions prior to 2.9.9, update to version 2.9.9 or later to resolve the issue...

PT-2017-14162

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.9.9 Description The issue concerns Cross-Site Request Forgery CSRF in the admin/stat.adminlog.php file. Recommendations For versions prior to 2.9.9, update to version 2.9.9 or later to resolve the issue...

PT-2017-14165

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.9.9 Description The issue concerns Cross-Site Request Forgery CSRF in the admin/stat.main.php file. Recommendations For versions prior to 2.9.9, update to version 2.9.9 or later to resolve the issue...