CVE-2014-6048: Infoleak
Published Aug 28, 2018
·Updated
phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request.
Affected Software
1 affected component
PhpMyFaq phpmyfaq<2.8.13
Event History
Aug 28, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6048?
CVE-2014-6048 is rated as a moderate severity vulnerability due to its potential for unauthorized access to sensitive attachments.
2
How do I fix CVE-2014-6048?
The vulnerability CVE-2014-6048 can be fixed by upgrading phpMyFAQ to version 2.8.13 or later.
3
What kind of attack is possible with CVE-2014-6048?
CVE-2014-6048 allows remote attackers to read arbitrary attachments through direct URL requests.
4
Which versions of phpMyFAQ are affected by CVE-2014-6048?
CVE-2014-6048 affects all versions of phpMyFAQ before 2.8.13.
5
Is CVE-2014-6048 a local or remote vulnerability?
CVE-2014-6048 is a remote vulnerability that can be exploited from any location with internet access.