CSRF Vulnerability in phpMyFAQ Affects Security
CVE-2018-16650

8.8HIGH

Key Information:

Vendor

pHPMyFAQ

Status
pHPMyFAQ
Vendor
CVE Published:
7 September 2018

What is CVE-2018-16650?

A cross-site request forgery (CSRF) vulnerability in phpMyFAQ prior to version 2.9.11 allows attackers to perform actions on behalf of authorized users without their consent. This can lead to unauthorized changes and data manipulation, putting user accounts and sensitive information at risk. It is crucial for users of phpMyFAQ to upgrade to the latest version to mitigate this vulnerability and ensure better protection against potential exploits.

References

https://www.phpmyfaq.de/security/advisory-2018-09-02
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.