svn commit: r413863 - head/security/vuxml

Sat Apr 23 11:40:46 UTC 2016

Author: flo
Date: Sat Apr 23 11:40:45 2016
New Revision: 413863
URL: https://svnweb.freebsd.org/changeset/ports/413863

Log:
  Document phpmyfaq vulnerability
  
  Security:	https://vuxml.freebsd.org/freebsd/f87a9376-0943-11e6-8fc4-00a0986f28c4.html
  Security:	http://www.phpmyfaq.de/security/advisory-2016-04-11
  Sponsored by:	Essen Linuxhotel Hackathon 2016

Modified:
  head/security/vuxml/vuln.xml

Modified: head/security/vuxml/vuln.xml
==============================================================================

--- head/security/vuxml/vuln.xml	Sat Apr 23 11:38:21 2016	(r413862)
+++ head/security/vuxml/vuln.xml	Sat Apr 23 11:40:45 2016	(r413863)
@@ -58,6 +58,39 @@ Notes:
   * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
 -->
 <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+  <vuln vid="f87a9376-0943-11e6-8fc4-00a0986f28c4">
+    <topic>phpmyfaq -- cross-site request forgery vulnerability</topic>
+    <affects>
+      <package>
+	<name>phpmyfaq</name>
+	<range><lt>2.8.27</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">
+	<p>The phpMyFAQ team reports:</p>
+	<blockquote cite="http://www.phpmyfaq.de/security/advisory-2016-04-11">
+	  <p>The vulnerability exists due to application does not properly
+	    verify origin of HTTP requests in "Interface Translation"
+	    functionality.: A remote unauthenticated attacker can create
+	    a specially crafted malicious web page with CSRF exploit, trick
+	    a logged-in administrator to visit the page, spoof the HTTP
+	    request, as if it was coming from the legitimate user, inject
+	    and execute arbitrary PHP code on the target system with privileges
+	    of the webserver.</p>
+	</blockquote>
+      </body>
+    </description>
+    <references>
+      <url>http://www.phpmyfaq.de/security/advisory-2016-04-11</url>
+      <url>https://www.htbridge.com/advisory/HTB23300</url>
+    </references>
+    <dates>
+      <discovery>2016-04-11</discovery>
+      <entry>2016-04-23</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="1b0d2938-0766-11e6-94fa-002590263bf5">
     <topic>libtasn1 -- denial of service parsing malicious DER certificates</topic>
     <affects>
