Description
Cross-site request forgery (CSRF) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to hijack the authentication of arbitrary users for requests that modify settings.
References
- JVN#50943964 third-party-advisory
- 102939 vdb-entry
- JVNDB-2014-000016 third-party-advisory
- 65368 vdb-entry
- http://www.phpmyfaq.de/advisory_2014-02-04.php
- 56006 third-party-advisory
- phpmyfaq-cve20140813-csrf(90963) vdb-entry