EDB-34580
PoCphpMyFAQ 2.8.x - Multiple Vulnerabilities
01
exploited CVEs (6)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-6050US | medium5.3 | Exploit | ||
phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request. | ||||
| CVE-2014-6049US | low2.7 | Exploit | ||
phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted instance ID parameter. | ||||
| CVE-2014-6048US | medium5.3 | Exploit | ||
phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request. | ||||
| CVE-2014-6047US | medium5.3 | Exploit | ||
phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks. | ||||
| CVE-2014-6046US | high8.8 | Exploit | ||
Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecified users for requests that (1)… | ||||
| CVE-2014-6045US | high7.2 | Exploit | ||
SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the restore… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan