Cross-site Request Forgery (CSRF)

2017-10-2307:50:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

32.5%

JSON

phpmyfaq/phpmyfaq is vulnerable to cross-site request forgery (CSRF) attacks. The library does not have CSRF protection for the phpmyfaq/admin/ajax.attachment.php and phpmyfaq/admin/att.main.php files, allowing a malicious user to send a request to the application to delete attachments.

CPENameOperatorVersion
phpmyfaq/phpmyfaqle2.9.8
thorsten/phpmyfaqle2.9.8

CPE	Name	Operator	Version
	phpmyfaq/phpmyfaq	le	2.9.8
	thorsten/phpmyfaq	le	2.9.8

References

github.com/thorsten/phpMyFAQ/commit/ef5a66df4bcfacc7573322af33ce10c30e0bb896

0.001 Low

EPSS

Percentile

32.5%

JSON

Related for VERACODE:5309