Vulnerabilities > CVE-2023-0790 - Uncaught Exception vulnerability in PHPmyfaq

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
phpmyfaq
CWE-248
NVD
Published: 2023-02-12
Updated: 2023-12-18

Summary

Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Vulnerable Configurations

Part Description Count
Application
Phpmyfaq
246

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

  • Probe Application Error Reporting
    An Attacker, aware of an application's location (and possibly authorized to use the application) can probe the application's structure and evaluate its robustness by probing its error conditions (not unlike one would during a 'fuzz' test, but more purposefully here) in order to support attacks such as blind SQL injection, or for the more general task of mapping the application to mount another subsequent attack.

References