Описание
phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request.
Ссылки
- Broken LinkPatchVendor Advisory
- Broken LinkThird Party AdvisoryVDB Entry
- Broken LinkPatch
- ProductVendor Advisory
- Broken LinkPatchThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Broken LinkPatchVendor Advisory
- Broken LinkThird Party AdvisoryVDB Entry
- Broken LinkPatch
- ProductVendor Advisory
- Broken LinkPatchThird Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:phpmyfaq:phpmyfaq:1.4.0:*:*:*:*:*:*:*
EPSS
Процентиль: 80%
0.01328
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-425
CWE-425
Связанные уязвимости
CVSS3: 5.3
github
почти 4 года назад
phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request.
EPSS
Процентиль: 80%
0.01328
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-425
CWE-425