CVE-2014-6049

phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted instance ID parameter.

Score

CVSS 3.0 2.7 Low

Status

Modified - cve@mitre.org

Published

2018-08-28

Last modified

2024-08-06

Weaknesses

CWE-285

Affected products

• Phpmyfaq (Phpmyfaq)

References

• http://techdefencelabs.com/security-advisories.html
• https://www.phpmyfaq.de/security/advisory-2014-09-16