2018-09-07 05:00:00
mitre
PUBLISHED
The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports.