CVE-2017-15733: CSRF
Published Oct 21, 2017
·Updated
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and admin/att.main.php.
Affected Software
1 affected component
PhpMyFaq phpmyfaq<=2.9.8
Remediation
Event History
Oct 21, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15733?
CVE-2017-15733 is considered a high severity vulnerability due to its potential for exploitation via Cross-Site Request Forgery (CSRF).
2
How do I fix CVE-2017-15733?
To fix CVE-2017-15733, upgrade phpMyFAQ to version 2.9.9 or later where the vulnerability has been addressed.
3
What specific components are affected by CVE-2017-15733?
CVE-2017-15733 affects the admin/ajax.attachment.php and admin/att.main.php components of phpMyFAQ.
4
What type of vulnerability is CVE-2017-15733?
CVE-2017-15733 is classified as a Cross-Site Request Forgery (CSRF) vulnerability.
5
Is there a known exploit for CVE-2017-15733?
While specific exploits for CVE-2017-15733 have not been detailed, the nature of CSRF vulnerabilities can allow unauthorized commands to be executed.