phpMyFAQ 2.9.9 Code Injection
Posted by deepcore on November 18, 2017 – 8:58 pm
phpMyFAQ version 2.9.9 suffers from an issue where an administrative account can execute arbitrary code on the server by modifying LANG_CONF[main.metaDescription].
Post a reply
You must be logged in to post a comment.