CVE-2014-6047

phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cve@mitre.org

Published

2018-08-28

Last modified

2024-08-06

Weaknesses

CWE-275

Affected products

• Phpmyfaq (Phpmyfaq)

References

• http://techdefencelabs.com/security-advisories.html
• https://www.phpmyfaq.de/security/advisory-2014-09-16