Beveiligingsadvies

CVE-2026-46362

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-15 18:36:41

Laatst bijgewerkt 2026-05-28 14:15:25

Toegewezen door VulnCheck

CVSS-score 7.1

Status PUBLISHED

Beschrijving

phpMyFAQ before 4.1.2 contains an authorization bypass vulnerability in AbstractAdministrationController::userHasPermission() that fails to terminate execution after sending a forbidden response. Attackers can access all permission-protected admin pages by requesting their URLs as authenticated users, exposing admin logs, user data, system information, and application configuration.

← Alle CVE's bekijken Bekijk op cve.org ↗