CVE-2014-6047: Phpmyfaq

Medium severity, CVSS 5.3. EPSS: 5.7% chance of exploitation in the next 30 days.

phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks.

Affected products

• Phpmyfaq Phpmyfaq: before 2.8.13 (fixed in 2.8.13)

Published 2018-08-28. Last modified 2026-06-17.