Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

154 records

Vendor: thorsten Component: Phpmyfaq Clear all filters
TI-2026-53320 CVE-2026-76215 · GHSA-jqpp-mfm2-hfw2

phpMyFAQ before 4.1.7 Missing Authorization via child resources

Priority HIGH 70

phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0035 Published 2026-08-19 Fixed in 4.1.7 CWE-862
TI-2026-53319 CVE-2026-76214 · GHSA-wg4g-rgc9-r6gj

phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge

Priority LOW 39

phpMyFAQ before 4.1.7 fails to persist the WebAuthn login challenge generated by prepareForLogin, because neither WebAuthn controller saves the mutated key objects back to the database.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00392 Published 2026-08-19 Fixed in 4.1.7 CWE-294
TI-2026-53318 CVE-2026-76213 · GHSA-xgjh-9vcx-v63q

phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle

Priority HIGH 74

phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is session-scoped and reset on each successful password re-authentication.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00449 Published 2026-08-19 Fixed in 4.1.7 CWE-307
TI-2026-53317 CVE-2026-76212 · GHSA-jj45-w38g-gfrj

phpMyFAQ before 4.1.7 LIKE Wildcard Injection via PostgreSQL

Priority HIGH 70

phpMyFAQ before 4.1.7, when configured to use PostgreSQL via the native pgsql PHP extension, declares an incorrect LIKE ESCAPE character ('=') in the Search/Database/Pgsql.php backend while escapeLikeWildcards() escapes…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00428 Published 2026-08-19 Fixed in 4.1.7 CWE-88
TI-2026-53316 CVE-2026-76211 · GHSA-7r9q-gvqq-999j

phpMyFAQ before 4.1.7 Information Disclosure via Admin API

Priority MEDIUM 57

phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATION_EDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard configuration, allowing any authenticated user to access sensit…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00293 Published 2026-08-19 Fixed in 4.1.7 CWE-862
TI-2026-53314 CVE-2026-76209 · GHSA-fh25-jpw4-vg4p

phpMyFAQ before v4.1.6 Registration Bypass via API

Priority LOW 24

phpMyFAQ versions before v4.1.6 fail to validate the security.enableRegistration setting in API endpoints, allowing attackers to create user accounts when registration is disabled.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00289 Published 2026-08-19 Fixed in 4.1.6 CWE-862
TI-2026-53312 CVE-2026-76207 · GHSA-jvxm-3fc5-8pjr

phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookie

Priority MEDIUM 40

phpMyFAQ before 4.1.7 contains a two-factor authentication bypass vulnerability where remember-me tokens are issued before 2FA verification completes.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00456 Published 2026-08-19 Fixed in 4.1.7 CWE-304
TI-2026-53311 CVE-2026-76206 · GHSA-7wx9-j8xm-mjmq

phpMyFAQ before 4.1.7 Information Disclosure via PDF Export

Priority LOW 36

phpMyFAQ versions before 4.1.7 fail to validate active status in the PDF export endpoint, allowing unauthenticated attackers to retrieve draft FAQ metadata.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00362 Published 2026-08-19 Fixed in 4.1.7 CWE-200
TI-2026-53310 CVE-2026-76205 · GHSA-gvqv-x9gq-w33g

phpMyFAQ before 4.1.7 SQL Injection via Glossary

Priority HIGH 72

phpMyFAQ before 4.1.7 contains a SQL injection vulnerability in the glossary create and update endpoints caused by truncating an escaped string before embedding it in a SQL literal.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00428 Published 2026-08-19 Fixed in 4.1.7 CWE-89
TI-2026-53148 CVE-2026-75920 · GHSA-2mwq-hcmq-fqq4

phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIP

Priority LOW 27

phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database credentials.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00358 Published 2026-08-19 Fixed in 4.1.6 CWE-377
TI-2026-53147 CVE-2026-75919 · GHSA-gjx5-c2mr-w8c7

phpMyFAQ before 4.1.7 Authentication Bypass via Setup API

Priority HIGH 70

phpMyFAQ before 4.1.7 contains an authentication bypass vulnerability in SetupController that allows unauthenticated attackers to run database migrations and create configuration backups when maintenance mode is enabled.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00549 Published 2026-08-19 Fixed in 4.1.7 CWE-306
TI-2026-53146 CVE-2026-75918 · GHSA-hccc-74hg-j43v

phpMyFAQ before 4.1.7 Authentication Bypass via Tracking File

Priority HIGH 73

phpMyFAQ before 4.1.7 stores password reset tokens in a publicly accessible tracking file when user tracking is enabled.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00494 Published 2026-08-19 Fixed in 4.1.7 CWE-200
Load more