CyberRota Analysis
AI-GeneratedA two-factor authentication bypass vulnerability in phpMyFAQ versions prior to 4.1.7 allows attackers with valid credentials to exploit the issuance of remember-me tokens before 2FA verification is completed. This enables them to bypass the second-factor challenge and gain full authenticated access by replaying the cookie. Organizations using affected versions of phpMyFAQ should prioritize patching to mitigate the risk of unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
phpMyFAQ before 4.1.7 contains a two-factor authentication bypass vulnerability where remember-me tokens are issued before 2FA verification completes. Attackers with valid credentials can obtain a remember-me cookie, skip the 2FA challenge, and replay the cookie to gain full authenticated access without second-factor verification.
Related CVEs
Other vulnerabilities affecting the same vendor(s)