CVE-2010-4558: Code Injection

Published Dec 17, 2010

Updated

phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification (Trojan Horse) in the getTopTen method in inc/Faq.php, which allows remote attackers to execute arbitrary PHP code.

Affected Software

2 affected components

PhpMyFaq phpmyfaq=2.6.11

PhpMyFaq phpmyfaq=2.6.12

Remediation

Patch Available

http://www.securityfocus.com/bid/45442

Event History

Dec 17, 2010

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-4558?

CVE-2010-4558 is classified as a critical vulnerability due to its potential for arbitrary code execution.

How do I fix CVE-2010-4558?

To fix CVE-2010-4558, you should upgrade to a patched version of phpMyFAQ that is not affected by this vulnerability.

Who is affected by CVE-2010-4558?

CVE-2010-4558 affects users of phpMyFAQ versions 2.6.11 and 2.6.12.

What type of attack does CVE-2010-4558 enable?

CVE-2010-4558 enables remote attackers to execute arbitrary PHP code through the compromised getTopTen method.

When was CVE-2010-4558 discovered?

CVE-2010-4558 was introduced in phpMyFAQ versions 2.6.11 and 2.6.12, distributed between December 4th and December 15th, 2010.