Description

phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request.

Remediation

References

CVE-2004-2257

Related Vulnerabilities

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3389)

IBM RTC Inadequate Encryption Strength Vulnerability (CVE-2020-4965)

Oracle Application Server CVE-2006-3712 Vulnerability (CVE-2006-3712)

WordPress Plugin EZP Coming Soon Page Cross-Site Scripting (1.0.0)

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Cross-Site Scripting Vulnerabilities (2.9.51)

Severity

Medium

Classification

CVE-2004-2257

Tags

Missing Update Known Vulnerabilities