Description

phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request.

Remediation

References

CVE-2014-6048

Related Vulnerabilities

WordPress Plugin Alojapro Widget Cross-Site Scripting (1.1.15)

Envoy Proxy Always-Incorrect Control Flow Implementation Vulnerability (CVE-2024-53271)

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Directory Traversal (1.3.33)

LimeSurvey Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2025-41074)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-10160)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2014-6048