Read the docs

thorsten

Records225All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical20CVSS 9.0–10.0
CVSS high80CVSS 7.0–8.9

Exploited now

thorsten records in CISA KEV

No thorsten vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Phpmyfaq 154 records HIGH

Records

154 records in Phpmyfaq · all components

TI-2023-00296 CVE-2023-0311 · GHSA-g92r-9rxw-cmgx

Improper Authentication in thorsten/phpmyfaq

Priority HIGH 82

Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00971 Published 2023-01-15 Fixed in 3.1.10 CWE-287
TI-2023-00749 CVE-2023-0789 · GHSA-6vp5-vv9p-7q62

Command Injection in thorsten/phpmyfaq

Priority HIGH 76

Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01662 Published 2023-02-12 Fixed in 3.1.11 CWE-77
TI-2023-00748 CVE-2023-0788 · GHSA-r6cw-356h-mvwg

Code Injection in thorsten/phpmyfaq

Priority HIGH 76

Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00886 Published 2023-02-12 Fixed in 3.1.11 CWE-94
TI-2023-05400 CVE-2023-5865 · GHSA-f728-prhw-2g68

Insufficient Session Expiration in thorsten/phpmyfaq

Priority HIGH 75

Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00707 Published 2023-10-31 Fixed in 3.2.2 CWE-613
TI-2023-02283 CVE-2023-2429 · GHSA-r69v-q48g-3966

Improper Access Control in thorsten/phpmyfaq

Priority HIGH 75

Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.13.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00533 Published 2023-04-30 Fixed in 3.1.13 CWE-284
TI-2023-00292 CVE-2023-0307 · GHSA-4p88-cfhq-f3vg

Weak Password Requirements in thorsten/phpmyfaq

Priority HIGH 75

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00673 Published 2023-01-15 Fixed in 3.1.10 CWE-521
TI-2022-03448 CVE-2022-3754 · GHSA-2rr3-rv49-p42f

Weak Password Requirements in thorsten/phpmyfaq

Priority HIGH 75

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01575 Published 2022-10-29 Fixed in 3.1.8 CWE-521
TI-2026-53318 CVE-2026-76213 · GHSA-xgjh-9vcx-v63q

phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle

Priority HIGH 74

phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is session-scoped and reset on each successful password re-authentication.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00449 Published 2026-08-19 Fixed in 4.1.7 CWE-307
TI-2026-53146 CVE-2026-75918 · GHSA-hccc-74hg-j43v

phpMyFAQ before 4.1.7 Authentication Bypass via Tracking File

Priority HIGH 73

phpMyFAQ before 4.1.7 stores password reset tokens in a publicly accessible tracking file when user tracking is enabled.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00494 Published 2026-08-19 Fixed in 4.1.7 CWE-200
TI-2023-01655 CVE-2023-1762 · GHSA-xww4-w6ff-5q3g

Improper Privilege Management in thorsten/phpmyfaq

Priority HIGH 73

Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00876 Published 2023-03-31 Fixed in 3.1.12 CWE-269
TI-2026-53310 CVE-2026-76205 · GHSA-gvqv-x9gq-w33g

phpMyFAQ before 4.1.7 SQL Injection via Glossary

Priority HIGH 72

phpMyFAQ before 4.1.7 contains a SQL injection vulnerability in the glossary create and update endpoints caused by truncating an escaped string before embedding it in a SQL literal.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00428 Published 2026-08-19 Fixed in 4.1.7 CWE-89
TI-2022-03321 CVE-2022-3608 · GHSA-6rj8-9cm9-6gff

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Priority HIGH 72

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.01179 Published 2022-10-19 Fixed in 3.2.0-alpha CWE-79
TI-2023-00835 CVE-2023-0880 · GHSA-f9c6-4j9h-6c5r

Misinterpretation of Input in thorsten/phpmyfaq

Priority HIGH 71

Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.0061 Published 2023-02-17 Fixed in 3.1.11 CWE-115
TI-2023-00753 CVE-2023-0793 · GHSA-fxrq-xhj9-rf5j

Weak Password Requirements in thorsten/phpmyfaq

Priority HIGH 71

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00707 Published 2023-02-12 Fixed in 3.1.11 CWE-521
Load more
Open these records in search →