Description
phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks.
Remediation
References
Related Vulnerabilities
WordPress Plugin Facebook Page Photo Gallery Cross-Site Scripting (2.0.9)
Apache Tomcat Other Vulnerability (CVE-2006-3835)
Jboss EAP Observable Discrepancy Vulnerability (CVE-2022-3143)
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2021-24066)
WordPress 4.0.x Arbitrary File Deletion Vulnerability (4.0 - 4.0.23)