EDB-34580
PoCphpMyFAQ 2.8.x - Multiple Vulnerabilities
01
ausgenutzte CVEs (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2014-6050US | medium5.3 | Exploit | ||
phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request. | ||||
| CVE-2014-6049US | low2.7 | Exploit | ||
phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted instance ID parameter. | ||||
| CVE-2014-6048US | medium5.3 | Exploit | ||
phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request. | ||||
| CVE-2014-6047US | medium5.3 | Exploit | ||
phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks. | ||||
| CVE-2014-6046US | high8.8 | Exploit | ||
Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecified users for requests that (1)… | ||||
| CVE-2014-6045US | high7.2 | Exploit | ||
SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the restore… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan