Description
phpMyFAQ 3.1.12 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into their profile names. Attackers can modify their user profile name with a payload like 'calc|a!z|' to trigger code execution when an administrator exports user data as a CSV file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Phpmyfaq | phpMyFAQ | 3.1.12 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | phpmyfaq/phpmyfaq | <= 3.1.12 | — | GHSA-x2v3-9p22-w3x6 |
| Packagist | thorsten/phpmyfaq | <= 3.1.12 | — | GHSA-x2v3-9p22-w3x6 |
References
- ExploitDB-51399 exploit
- Official Product Homepage product
- VulnCheck Advisory: phpMyFAQ 3.1.12 CSV Injection via User Profile Export third-party-advisory