Information Disclosure

2022-12-1302:45:36

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

phpmyfaq

information disclosure

setcookie function

session.php

insecure http cookies

secure attribute

vulnerability

software

EPSS

0.001

Percentile

51.3%

JSON

thorsten/phpmyfaq is vulnerable to information disclosure.The vulnerability exists in the setCookie function of session.php due to insecure HTTP cookies without the ‘secure’ attribute which allows an attacker to gain access to sensitive information.