CVE-2024-29196

CVSS V2 None CVSS V3 None

Description

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. There is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root. This vulnerability is fixed in 3.2.6.

Overview

CVE ID
CVE-2024-29196

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-03-26T03:01:36.890Z

Last Modified Date
2024-03-26T03:01:36.890Z

Weakness Enumerations

CWE	URL
CWE-22	http://cwe.mitre.org/data/definitions/22.html

References

Reference URL	Reference Tags
https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-mmh6-5cpf-2c72	x_refsource_CONFIRM
https://github.com/thorsten/phpMyFAQ/commit/7ae2559f079cd5fc9948b6fdfb87581f93840f62	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-29196
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29196

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 02:17:33				Added to TrackCVE