Vulnerabilities > CVE-2007-1032 - Remote Security vulnerability in phpMyFAQ

CVSS 6.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

phpmyfaq

nessus

NVD

Published: 2007-02-21

Updated: 2017-07-29

Summary

Unspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when register_globals is enabled, allows remote attackers to "gain the privilege for uploading files on the server." Successful exploitation requires that "register_globals" is enabled.

Vulnerable Configurations

Part	Description	Count
Application	Phpmyfaq Phpmyfaq Phpmyfaq 0.60 Phpmyfaq Phpmyfaq 0.65 Phpmyfaq Phpmyfaq 0.70 Phpmyfaq Phpmyfaq 0.80 Phpmyfaq Phpmyfaq 0.80A Phpmyfaq Phpmyfaq 0.85 Phpmyfaq Phpmyfaq 0.86 Phpmyfaq Phpmyfaq 0.87 Phpmyfaq Phpmyfaq 0.90 Phpmyfaq Phpmyfaq 0.95 Phpmyfaq Phpmyfaq 0.666 Phpmyfaq Phpmyfaq 1.0 Phpmyfaq Phpmyfaq 1.0.1 Phpmyfaq Phpmyfaq 1.0.1A Phpmyfaq Phpmyfaq 1.1.0 Phpmyfaq Phpmyfaq 1.1.1 Phpmyfaq Phpmyfaq 1.1.2 Phpmyfaq Phpmyfaq 1.1.3 Phpmyfaq Phpmyfaq 1.1.4 Phpmyfaq Phpmyfaq 1.1.4A Phpmyfaq Phpmyfaq 1.1.5 Phpmyfaq Phpmyfaq 1.2.0 Phpmyfaq Phpmyfaq 1.2.1 Phpmyfaq Phpmyfaq 1.2.2 Phpmyfaq Phpmyfaq 1.2.3 Phpmyfaq Phpmyfaq 1.2.4 Phpmyfaq Phpmyfaq 1.2.5 Phpmyfaq Phpmyfaq 1.2.5A Phpmyfaq Phpmyfaq 1.2.5B Phpmyfaq Phpmyfaq 1.3.0 Phpmyfaq Phpmyfaq 1.3.1 Phpmyfaq Phpmyfaq 1.3.2 Phpmyfaq Phpmyfaq 1.3.3 Phpmyfaq Phpmyfaq 1.3.4 Phpmyfaq Phpmyfaq 1.3.5 Phpmyfaq Phpmyfaq 1.3.6 Phpmyfaq Phpmyfaq 1.3.7 Phpmyfaq Phpmyfaq 1.3.8 Phpmyfaq Phpmyfaq 1.3.9 Phpmyfaq Phpmyfaq 1.3.9Pl1 Phpmyfaq Phpmyfaq 1.3.10 Phpmyfaq Phpmyfaq 1.3.11 Phpmyfaq Phpmyfaq 1.3.12 Phpmyfaq Phpmyfaq 1.3.13 Phpmyfaq Phpmyfaq 1.3.14 Phpmyfaq Phpmyfaq 1.4.0 Phpmyfaq Phpmyfaq 1.4.0A Phpmyfaq Phpmyfaq 1.4.1 Phpmyfaq Phpmyfaq 1.4.2 Phpmyfaq Phpmyfaq 1.4.3 Phpmyfaq Phpmyfaq 1.4.4 Phpmyfaq Phpmyfaq 1.4.5 Phpmyfaq Phpmyfaq 1.4.6 Phpmyfaq Phpmyfaq 1.4.7 Phpmyfaq Phpmyfaq 1.4.8 Phpmyfaq Phpmyfaq 1.4.9 Phpmyfaq Phpmyfaq 1.4.10 Phpmyfaq Phpmyfaq 1.4.11 Phpmyfaq Phpmyfaq 1.5.0 Phpmyfaq Phpmyfaq 1.5.1 Phpmyfaq Phpmyfaq 1.5.2 Phpmyfaq Phpmyfaq 1.5.3 Phpmyfaq Phpmyfaq 1.5.4 Phpmyfaq Phpmyfaq 1.5.5 Phpmyfaq Phpmyfaq 1.5.6 Phpmyfaq Phpmyfaq 1.5.7 Phpmyfaq Phpmyfaq 1.5.8 Phpmyfaq Phpmyfaq 1.5.9 Phpmyfaq Phpmyfaq 1.6.0 Phpmyfaq Phpmyfaq 1.6.1 Phpmyfaq Phpmyfaq 1.6.2 Phpmyfaq Phpmyfaq 1.6.3 Phpmyfaq Phpmyfaq 1.6.4 Phpmyfaq Phpmyfaq 1.6.5 Phpmyfaq Phpmyfaq 1.6.6 Phpmyfaq Phpmyfaq 1.6.7 Phpmyfaq Phpmyfaq 1.6.8 Phpmyfaq Phpmyfaq 0.1 Phpmyfaq Phpmyfaq 1.0.0 Phpmyfaq Phpmyfaq 1.4 Phpmyfaq Phpmyfaq 1.5 Phpmyfaq Phpmyfaq 1.6.9	108

Nessus

NASL family	CGI abuses
NASL id	PHPMYFAQ_1_610.NASL
description	The installation of phpMyFAQ on the remote host allows for bypassing authentication or escalating privileges via the
last seen	2020-06-01
modified	2020-06-02
plugin id	24672
published	2007-02-20
reporter	This script is Copyright (C) 2007-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/24672
title	phpMyFAQ < 1.6.10 Multiple Script Arbitrary File Upload

Summary

Vulnerable Configurations

Nessus

References