Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5310
HistoryOct 23, 2017 - 8:16 a.m.

Cross-site Request Forgery (CSRF)

2017-10-2308:16:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

EPSS

0.001

Percentile

31.7%

phpmyfaq/phpmyfaq is vulnerable to cross-site request forgery (CSRF) attacks. The application does not have CSRF protection for the phpmyfaq/admin/stat.main.php file, allowing a malicious user to send a request to the application to clear the visits value on the stat page.

EPSS

0.001

Percentile

31.7%

Related for VERACODE:5310