CVE-2014-6047

5.3 mediumEPSS 5.7%

Medium (5.3) in phpmyfaq phpmyfaq. EPSS 5.7% chance of exploitation in the next 30 days.

phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks.

Severity

CVSS 3.0

5.3 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 5.7% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-275
Published: 2018-08-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phpmyfaq:phpmyfaq

References

http://techdefencelabs.com/security-advisories.html
https://www.phpmyfaq.de/security/advisory-2014-09-16
http://techdefencelabs.com/security-advisories.html
https://www.phpmyfaq.de/security/advisory-2014-09-16

Check your stack JSON