CVE-2014-0813

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-14 · updated 2026-06-17
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to hijack the authentication of arbitrary users for requests that modify settings.

Affected products

thorsten phpMyFAQ: through 2.8.5; 1.0, 1.0.1, 1.0.1a, 1.1.0, 1.1.1, 1.1.2 (+138)

References

http://jvn.jp/en/jp/JVN50943964/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000016
http://osvdb.org/102939
http://secunia.com/advisories/56006
http://www.phpmyfaq.de/advisory_2014-02-04.php
http://www.securityfocus.com/bid/65368
https://exchange.xforce.ibmcloud.com/vulnerabilities/90963
http://jvn.jp/en/jp/JVN50943964/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000016
http://osvdb.org/102939
http://secunia.com/advisories/56006
http://www.phpmyfaq.de/advisory_2014-02-04.php

Get alerted when CVE-2014-0813 or the next vulnerability affects your stack