phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request.
| Software | From | Fixed in |
|---|---|---|
phpmyfaq / phpmyfaq
|
- | 2.8.13 |