Description
phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification (Trojan Horse) in the getTopTen method in inc/Faq.php, which allows remote attackers to execute arbitrary PHP code.
References
- 45442 vdb-entry
- ADV-2010-3254 vdb-entry
- 42622 third-party-advisory
- http://www.phpmyfaq.de/advisory_2010-12-15.php