CVE-2007-1032: Medium severity PhpMyFaq phpmyfaq vulnerability
Published Feb 21, 2007
·Updated
Unspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when registerglobals is enabled, allows remote attackers to "gain the privilege for uploading files on the server."
Affected Software
78 affected components
PhpMyFaq phpmyfaq<=1.6.9
PhpMyFaq phpmyfaq=0.60
PhpMyFaq phpmyfaq=0.65
PhpMyFaq phpmyfaq=0.70
PhpMyFaq phpmyfaq=0.80
PhpMyFaq phpmyfaq=0.80a
PhpMyFaq phpmyfaq=0.85
PhpMyFaq phpmyfaq=0.86
PhpMyFaq phpmyfaq=0.87
PhpMyFaq phpmyfaq=0.90
PhpMyFaq phpmyfaq=0.95
PhpMyFaq phpmyfaq=0.666
PhpMyFaq phpmyfaq=1.0
PhpMyFaq phpmyfaq=1.0.1
PhpMyFaq phpmyfaq=1.0.1a
PhpMyFaq phpmyfaq=1.1.0
PhpMyFaq phpmyfaq=1.1.1
PhpMyFaq phpmyfaq=1.1.2
PhpMyFaq phpmyfaq=1.1.3
PhpMyFaq phpmyfaq=1.1.4
PhpMyFaq phpmyfaq=1.1.4a
PhpMyFaq phpmyfaq=1.1.5
PhpMyFaq phpmyfaq=1.2.0
PhpMyFaq phpmyfaq=1.2.1
PhpMyFaq phpmyfaq=1.2.2
PhpMyFaq phpmyfaq=1.2.3
PhpMyFaq phpmyfaq=1.2.4
PhpMyFaq phpmyfaq=1.2.5
PhpMyFaq phpmyfaq=1.2.5a
PhpMyFaq phpmyfaq=1.2.5b
PhpMyFaq phpmyfaq=1.3.0
PhpMyFaq phpmyfaq=1.3.1
PhpMyFaq phpmyfaq=1.3.2
PhpMyFaq phpmyfaq=1.3.3
PhpMyFaq phpmyfaq=1.3.4
PhpMyFaq phpmyfaq=1.3.5
PhpMyFaq phpmyfaq=1.3.6
PhpMyFaq phpmyfaq=1.3.7
PhpMyFaq phpmyfaq=1.3.8
PhpMyFaq phpmyfaq=1.3.9
PhpMyFaq phpmyfaq=1.3.9pl1
PhpMyFaq phpmyfaq=1.3.10
PhpMyFaq phpmyfaq=1.3.11
PhpMyFaq phpmyfaq=1.3.12
PhpMyFaq phpmyfaq=1.3.13
PhpMyFaq phpmyfaq=1.3.14
PhpMyFaq phpmyfaq=1.4.0
PhpMyFaq phpmyfaq=1.4.0a
PhpMyFaq phpmyfaq=1.4.1
PhpMyFaq phpmyfaq=1.4.2
PhpMyFaq phpmyfaq=1.4.3
PhpMyFaq phpmyfaq=1.4.4
PhpMyFaq phpmyfaq=1.4.5
PhpMyFaq phpmyfaq=1.4.6
PhpMyFaq phpmyfaq=1.4.7
PhpMyFaq phpmyfaq=1.4.8
PhpMyFaq phpmyfaq=1.4.9
PhpMyFaq phpmyfaq=1.4.10
PhpMyFaq phpmyfaq=1.4.11
PhpMyFaq phpmyfaq=1.5.0
PhpMyFaq phpmyfaq=1.5.1
PhpMyFaq phpmyfaq=1.5.2
PhpMyFaq phpmyfaq=1.5.3
PhpMyFaq phpmyfaq=1.5.4
PhpMyFaq phpmyfaq=1.5.5
PhpMyFaq phpmyfaq=1.5.6
PhpMyFaq phpmyfaq=1.5.7
PhpMyFaq phpmyfaq=1.5.8
PhpMyFaq phpmyfaq=1.5.9
PhpMyFaq phpmyfaq=1.6.0
PhpMyFaq phpmyfaq=1.6.1
PhpMyFaq phpmyfaq=1.6.2
PhpMyFaq phpmyfaq=1.6.3
PhpMyFaq phpmyfaq=1.6.4
PhpMyFaq phpmyfaq=1.6.5
PhpMyFaq phpmyfaq=1.6.6
PhpMyFaq phpmyfaq=1.6.7
PhpMyFaq phpmyfaq=1.6.8
Remediation
Patch Available
Event History
Feb 21, 2007
CVE Published
11:28 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1032?
CVE-2007-1032 is considered to have a high severity due to its potential for unauthorized file uploads.
2
How do I fix CVE-2007-1032?
To fix CVE-2007-1032, disable the register_globals feature in your PHP configuration and upgrade to a patched version of phpMyFAQ.
3
What versions of phpMyFAQ are affected by CVE-2007-1032?
CVE-2007-1032 affects phpMyFAQ versions 1.6.9 and earlier.
4
What types of attacks are possible with CVE-2007-1032?
CVE-2007-1032 allows remote attackers to gain privileges to upload files to the server.
5
Is there a patch available for CVE-2007-1032?
Yes, a patch is available for CVE-2007-1032 by upgrading to a secure version of phpMyFAQ.