Description
phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request.
References
- 8240 vdb-entry
- 1010795 vdb-entry
- 12085 third-party-advisory
- phpmyfaq-authentication-bypass(16814) vdb-entry
- http://www.phpmyfaq.de/advisory_2004-07-27.php
- 10813 vdb-entry