CVE-2014-6045: SQL Injection
Published Aug 28, 2018
·Updated
SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the restore function.
Affected Software
1 affected component
PhpMyFaq phpmyfaq<2.8.13
Event History
Aug 28, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6045?
CVE-2014-6045 is considered a moderate severity SQL injection vulnerability.
2
How do I fix CVE-2014-6045?
To fix CVE-2014-6045, you should upgrade phpMyFAQ to version 2.8.13 or later.
3
Who is affected by CVE-2014-6045?
Remote authenticated users with certain permissions in phpMyFAQ versions prior to 2.8.13 are affected by CVE-2014-6045.
4
What type of vulnerability is CVE-2014-6045?
CVE-2014-6045 is an SQL injection vulnerability.
5
What can attackers do with CVE-2014-6045?
Attackers exploiting CVE-2014-6045 can execute arbitrary SQL commands through the restore function.