CVE-2017-15734

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/stat.main.php...

Cross site request forgery (csrf)

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/stat.main.php...

CVE-2017-15734: Cross-Site Request Forgery (CSRF)

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/stat.main.php...

CVE-2017-15734

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery CSRF in admin/stat.main.php...

CVE-2017-15734

Summary: CVE-2017-15734 affects phpMyFAQ prior to 2.9.9 and is a CSRF in admin/stat.main.php. The vulnerability arises due to missing CSRF token validation in the affected action (e.g., clear-visits) within stat.main.php, allowing unauthorized state-changing requests when a user is authenticated....

PT-2017-14165

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.9.9 Description The issue concerns Cross-Site Request Forgery CSRF in the admin/stat.main.php file. Recommendations For versions prior to 2.9.9, update to version 2.9.9 or later to resolve the issue...