6.8

CVE-2014-0813

Cross-site request forgery (CSRF) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to hijack the authentication of arbitrary users for requests that modify settings.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Phpmyfaq ≫ Phpmyfaq Version <= 2.8.5
Phpmyfaq ≫ Phpmyfaq Version 1.0
Phpmyfaq ≫ Phpmyfaq Version 1.0.1
Phpmyfaq ≫ Phpmyfaq Version 1.0.1a
Phpmyfaq ≫ Phpmyfaq Version 1.1.0
Phpmyfaq ≫ Phpmyfaq Version 1.1.1
Phpmyfaq ≫ Phpmyfaq Version 1.1.2
Phpmyfaq ≫ Phpmyfaq Version 1.1.3
Phpmyfaq ≫ Phpmyfaq Version 1.1.4
Phpmyfaq ≫ Phpmyfaq Version 1.1.4a
Phpmyfaq ≫ Phpmyfaq Version 1.1.5
Phpmyfaq ≫ Phpmyfaq Version 1.2.0
Phpmyfaq ≫ Phpmyfaq Version 1.2.1
Phpmyfaq ≫ Phpmyfaq Version 1.2.2
Phpmyfaq ≫ Phpmyfaq Version 1.2.3
Phpmyfaq ≫ Phpmyfaq Version 1.2.4
Phpmyfaq ≫ Phpmyfaq Version 1.2.5
Phpmyfaq ≫ Phpmyfaq Version 1.2.5a
Phpmyfaq ≫ Phpmyfaq Version 1.2.5b
Phpmyfaq ≫ Phpmyfaq Version 1.3.0
Phpmyfaq ≫ Phpmyfaq Version 1.3.1
Phpmyfaq ≫ Phpmyfaq Version 1.3.2
Phpmyfaq ≫ Phpmyfaq Version 1.3.3
Phpmyfaq ≫ Phpmyfaq Version 1.3.4
Phpmyfaq ≫ Phpmyfaq Version 1.3.5
Phpmyfaq ≫ Phpmyfaq Version 1.3.6
Phpmyfaq ≫ Phpmyfaq Version 1.3.7
Phpmyfaq ≫ Phpmyfaq Version 1.3.8
Phpmyfaq ≫ Phpmyfaq Version 1.3.9
Phpmyfaq ≫ Phpmyfaq Version 1.3.9 Update pl1
Phpmyfaq ≫ Phpmyfaq Version 1.3.10
Phpmyfaq ≫ Phpmyfaq Version 1.3.11
Phpmyfaq ≫ Phpmyfaq Version 1.3.12
Phpmyfaq ≫ Phpmyfaq Version 1.3.13
Phpmyfaq ≫ Phpmyfaq Version 1.3.14
Phpmyfaq ≫ Phpmyfaq Version 1.4
Phpmyfaq ≫ Phpmyfaq Version 1.4 Update alpha1
Phpmyfaq ≫ Phpmyfaq Version 1.4 Update alpha2
Phpmyfaq ≫ Phpmyfaq Version 1.4.0
Phpmyfaq ≫ Phpmyfaq Version 1.4.0a
Phpmyfaq ≫ Phpmyfaq Version 1.4.1
Phpmyfaq ≫ Phpmyfaq Version 1.4.2
Phpmyfaq ≫ Phpmyfaq Version 1.4.3
Phpmyfaq ≫ Phpmyfaq Version 1.4.4
Phpmyfaq ≫ Phpmyfaq Version 1.4.5
Phpmyfaq ≫ Phpmyfaq Version 1.4.6
Phpmyfaq ≫ Phpmyfaq Version 1.4.7
Phpmyfaq ≫ Phpmyfaq Version 1.4.8
Phpmyfaq ≫ Phpmyfaq Version 1.4.9
Phpmyfaq ≫ Phpmyfaq Version 1.4.10
Phpmyfaq ≫ Phpmyfaq Version 1.4.11
Phpmyfaq ≫ Phpmyfaq Version 1.5
Phpmyfaq ≫ Phpmyfaq Version 1.5 Update alpha1
Phpmyfaq ≫ Phpmyfaq Version 1.5 Update alpha2
Phpmyfaq ≫ Phpmyfaq Version 1.5 Update beta1
Phpmyfaq ≫ Phpmyfaq Version 1.5 Update beta2
Phpmyfaq ≫ Phpmyfaq Version 1.5 Update beta3
Phpmyfaq ≫ Phpmyfaq Version 1.5 Update rc1
Phpmyfaq ≫ Phpmyfaq Version 1.5 Update rc2
Phpmyfaq ≫ Phpmyfaq Version 1.5 Update rc3
Phpmyfaq ≫ Phpmyfaq Version 1.5 Update rc4
Phpmyfaq ≫ Phpmyfaq Version 1.5 Update rc5
Phpmyfaq ≫ Phpmyfaq Version 1.5.0
Phpmyfaq ≫ Phpmyfaq Version 1.5.1
Phpmyfaq ≫ Phpmyfaq Version 1.5.2
Phpmyfaq ≫ Phpmyfaq Version 1.5.3
Phpmyfaq ≫ Phpmyfaq Version 1.5.4
Phpmyfaq ≫ Phpmyfaq Version 1.5.5
Phpmyfaq ≫ Phpmyfaq Version 1.5.6
Phpmyfaq ≫ Phpmyfaq Version 1.5.7
Phpmyfaq ≫ Phpmyfaq Version 1.5.8
Phpmyfaq ≫ Phpmyfaq Version 1.5.9
Phpmyfaq ≫ Phpmyfaq Version 1.6.0
Phpmyfaq ≫ Phpmyfaq Version 1.6.1
Phpmyfaq ≫ Phpmyfaq Version 1.6.2
Phpmyfaq ≫ Phpmyfaq Version 1.6.3
Phpmyfaq ≫ Phpmyfaq Version 1.6.4
Phpmyfaq ≫ Phpmyfaq Version 1.6.5
Phpmyfaq ≫ Phpmyfaq Version 1.6.6
Phpmyfaq ≫ Phpmyfaq Version 1.6.7
Phpmyfaq ≫ Phpmyfaq Version 1.6.8
Phpmyfaq ≫ Phpmyfaq Version 1.6.9
Phpmyfaq ≫ Phpmyfaq Version 1.6.10
Phpmyfaq ≫ Phpmyfaq Version 1.6.11
Phpmyfaq ≫ Phpmyfaq Version 1.6.12
Phpmyfaq ≫ Phpmyfaq Version 2.0.0
Phpmyfaq ≫ Phpmyfaq Version 2.0.1
Phpmyfaq ≫ Phpmyfaq Version 2.0.2
Phpmyfaq ≫ Phpmyfaq Version 2.0.3
Phpmyfaq ≫ Phpmyfaq Version 2.0.4
Phpmyfaq ≫ Phpmyfaq Version 2.0.5
Phpmyfaq ≫ Phpmyfaq Version 2.0.6
Phpmyfaq ≫ Phpmyfaq Version 2.0.7
Phpmyfaq ≫ Phpmyfaq Version 2.0.8
Phpmyfaq ≫ Phpmyfaq Version 2.0.9
Phpmyfaq ≫ Phpmyfaq Version 2.0.10
Phpmyfaq ≫ Phpmyfaq Version 2.0.11
Phpmyfaq ≫ Phpmyfaq Version 2.0.12
Phpmyfaq ≫ Phpmyfaq Version 2.0.13
Phpmyfaq ≫ Phpmyfaq Version 2.0.14
Phpmyfaq ≫ Phpmyfaq Version 2.0.15
Phpmyfaq ≫ Phpmyfaq Version 2.0.16
Phpmyfaq ≫ Phpmyfaq Version 2.0.17
Phpmyfaq ≫ Phpmyfaq Version 2.5.0
Phpmyfaq ≫ Phpmyfaq Version 2.5.1
Phpmyfaq ≫ Phpmyfaq Version 2.5.2
Phpmyfaq ≫ Phpmyfaq Version 2.5.3
Phpmyfaq ≫ Phpmyfaq Version 2.5.4
Phpmyfaq ≫ Phpmyfaq Version 2.5.5
Phpmyfaq ≫ Phpmyfaq Version 2.5.6
Phpmyfaq ≫ Phpmyfaq Version 2.5.7
Phpmyfaq ≫ Phpmyfaq Version 2.6.0
Phpmyfaq ≫ Phpmyfaq Version 2.6.1
Phpmyfaq ≫ Phpmyfaq Version 2.6.2
Phpmyfaq ≫ Phpmyfaq Version 2.6.3
Phpmyfaq ≫ Phpmyfaq Version 2.6.4
Phpmyfaq ≫ Phpmyfaq Version 2.6.5
Phpmyfaq ≫ Phpmyfaq Version 2.6.6
Phpmyfaq ≫ Phpmyfaq Version 2.6.7
Phpmyfaq ≫ Phpmyfaq Version 2.6.8
Phpmyfaq ≫ Phpmyfaq Version 2.6.9
Phpmyfaq ≫ Phpmyfaq Version 2.6.10
Phpmyfaq ≫ Phpmyfaq Version 2.6.11
Phpmyfaq ≫ Phpmyfaq Version 2.6.12
Phpmyfaq ≫ Phpmyfaq Version 2.6.13
Phpmyfaq ≫ Phpmyfaq Version 2.6.14
Phpmyfaq ≫ Phpmyfaq Version 2.6.15
Phpmyfaq ≫ Phpmyfaq Version 2.6.16
Phpmyfaq ≫ Phpmyfaq Version 2.6.17
Phpmyfaq ≫ Phpmyfaq Version 2.6.18
Phpmyfaq ≫ Phpmyfaq Version 2.7.0
Phpmyfaq ≫ Phpmyfaq Version 2.7.1
Phpmyfaq ≫ Phpmyfaq Version 2.7.2
Phpmyfaq ≫ Phpmyfaq Version 2.7.3
Phpmyfaq ≫ Phpmyfaq Version 2.7.4
Phpmyfaq ≫ Phpmyfaq Version 2.7.5
Phpmyfaq ≫ Phpmyfaq Version 2.7.6
Phpmyfaq ≫ Phpmyfaq Version 2.7.7
Phpmyfaq ≫ Phpmyfaq Version 2.7.8
Phpmyfaq ≫ Phpmyfaq Version 2.7.9
Phpmyfaq ≫ Phpmyfaq Version 2.8.0
Phpmyfaq ≫ Phpmyfaq Version 2.8.1
Phpmyfaq ≫ Phpmyfaq Version 2.8.2
Phpmyfaq ≫ Phpmyfaq Version 2.8.3
Phpmyfaq ≫ Phpmyfaq Version 2.8.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.07% 0.605
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

http://jvn.jp/en/jp/JVN50943964/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000016
http://osvdb.org/102939
http://secunia.com/advisories/56006
http://www.phpmyfaq.de/advisory_2014-02-04.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/65368
https://exchange.xforce.ibmcloud.com/vulnerabilities/90963