| Package | Affected versions | Patched versions |
|---|---|---|
| phpmyfaq | < 2.8.13 | 2.8.13 |
phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free