Description

Cross-site request forgery (CSRF) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to hijack the authentication of arbitrary users for requests that modify settings.

Remediation

References

CVE-2014-0813

Related Vulnerabilities

WordPress Plugin WP-Forum Multiple SQL Injection Vulnerabilities (1.7.8)

XWiki Insufficiently Protected Credentials Vulnerability (CVE-2022-41933)

WordPress Plugin STT2 Extension Add Terms Unspecified Vulnerability (1.0.2)

Joomla Cryptographic Issues Vulnerability (CVE-2011-4321)

WordPress Plugin Slimstat Analytics SQL Injection (4.9.3.3)

Severity

Medium

Classification

CVE-2014-0813 CWE-352

Tags

Missing Update Known Vulnerabilities