In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and admin/att.main.php.
| Software | From | Fixed in |
|---|---|---|
phpmyfaq / phpmyfaq
|
- | 2.9.8.x |