Lucene search
Veracode Vulnerability DatabaseVERACODE:5308HistoryOct 23, 2017 - 7:21 a.m.
Cross-site Request Forgery (CSRF)
2017-10-2307:21:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
32.5%
phpmyfaq is vulnerable to cross-site request forgery (CSRF) attacks. The library is missing CSRF protection in the phpmyfaq/admin/news.php file, allowing a malicious user to send a request to delete a news entry.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpmyfaq/phpmyfaq | le | 2.9.8 | |
| thorsten/phpmyfaq | le | 2.9.8 |
Related
osv
osv
CVE-2017-15732
2017-10-22 18:29:00
nvd
nvd
CVE-2017-15732
2017-10-22 18:29:00
cve
cve
CVE-2017-15732
2022-10-03 16:23:35
prion
prion
Cross site request forgery (csrf)
2017-10-22 18:29:00
cvelist
cvelist
CVE-2017-15732
2022-10-03 16:23:35
openvas
openvas
phpMyFAQ Multiple XSS And CSRF Vulnerabilities
2017-09-21 00:00:00