Description
phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification (Trojan Horse) in the getTopTen method in inc/Faq.php, which allows remote attackers to execute arbitrary PHP code.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2024-20932 Vulnerability (CVE-2024-20932)
WordPress Plugin Testimonial Slider Cross-Site Scripting (1.2.1)
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-39126)
WordPress Plugin WORDPRESS VIDEO GALLERY SQL Injection (2.8)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7837)