High severity8.8NVD Advisory· Published Aug 28, 2018· Updated Jun 17, 2026

CVE-2014-6046

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecified users for requests that (1) delete active users by leveraging improper validation of CSRF tokens or that (2) delete open questions, (3) activate users, (4) publish FAQs, (5) add or delete Glossary, (6) add or delete FAQ news, or (7) add or delete comments or add votes by leveraging lack of a CSRF token.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Aimeos/Phpmyfaqinferred
Range: <2.8.13
Package: https://packagist.org/packages/phpmyfaq/phpmyfaq
PhpMyAdmin/Phpmyfaqllm-create
Range: <2.8.13

Patches

Vulnerability mechanics

References

techdefencelabs.com/security-advisories.htmlnvdThird Party Advisory
www.phpmyfaq.de/security/advisory-2014-09-16nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.030
kev	0.000
patch	-0.070
ransomware	0.000