PT-2024-22799 · Phpmyfaq · Phpmyfaq

Kevinnivekkevin · Published 2024-03-25 · Updated 2025-01-09 · CVE-2024-29196

Positive Technologies (AI Summary)

CVSS v3.1

3.8

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 3.2.6

Description There is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root. This issue can be exploited by remote attackers, potentially leading to the upload of malicious files outside the specified directory.

Recommendations For versions prior to 3.2.6, upgrade to version 3.2.6 to fix the Path Traversal vulnerability in Attachments. As a temporary workaround, consider restricting the attachment location settings to prevent path traversal until the upgrade is applied. Additionally, restrict access to the attachment upload feature to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-29196

GHSA-MMH6-5CPF-2C72

Affected Products

Phpmyfaq

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/29xxx/CVE-2024-29196.json · Exploit
• 🔥 https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-mmh6-5cpf-2c72 · Exploit
• https://github.com/thorsten/phpMyFAQ/commit/7ae2559f079cd5fc9948b6fdfb87581f93840f62 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-29196 · Security Note
• https://osv.dev/vulnerability/GHSA-mmh6-5cpf-2c72 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-29196 · Vendor Advisory
• https://github.com/thorsten/phpMyFAQ · Note
• https://twitter.com/VulmonFeeds/status/1772516137244168523 · Twitter Post
• https://twitter.com/oktsec/status/1773666863513325769 · Twitter Post
• https://t.me/cvenotify/106942 · Telegram Post
• https://twitter.com/CVEnew/status/1772462395933204736 · Twitter Post