Cross-Site Request Forgery Vulnerability in phpMyFAQ by phpMyFAQ Team
CVE-2017-15735

8.8HIGH

Key Information:

Vendor

pHPMyFAQ

Status
pHPMyFAQ
Vendor
CVE Published:
22 October 2017

What is CVE-2017-15735?

In phpMyFAQ prior to version 2.9.9, a Cross-Site Request Forgery (CSRF) vulnerability allows attackers to modify glossary entries without proper authorization. This flaw can be exploited by sending a specially crafted request to the affected system, potentially leading to unauthorized changes and compromised data integrity.

References

https://github.com/thorsten/phpMyFAQ/commit/867618110feb8...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.