Advisories · Technology
thorsten phpMyFAQ.
Every CVE that names thorsten phpMyFAQ among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
phpMyFAQ before 4.1.10 Authorization Bypass via /api/faq/create openQuestionID
- thorsten phpMyFAQ
- Broken access control
- CVSS 5.3 Medium
phpMyFAQ before 4.1.10 SSRF via PDF Export Image Fetching
- thorsten phpMyFAQ
- Server-side request forgery (SSRF)
- CVSS 9.3 CriticalCritical · CVSS 9+
phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via WebAuthn Credential Injection
- thorsten phpMyFAQ
- Authentication bypass
- CVSS 7.1 High
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Authorization Bypass via attachment.php Downloads
- thorsten phpMyFAQ
- Broken access control
- CVSS 7.2 High
phpMyFAQ before 4.1.9 Missing Authorization Allows Superadmin Deletion via deleteUser API
- thorsten phpMyFAQ
- Privilege escalation
- CVSS 8.7 High
phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta BOLA in FAQ Update via REST API
- thorsten phpMyFAQ
- Broken access control
- CVSS 7.1 High
phpMyFAQ 4.0.0 before 4.1.9 CSRF via /admin/api/update-database
- thorsten phpMyFAQ
- Cross-site request forgery (CSRF)
- CVSS 7.1 High
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta CSRF in Elasticsearch/OpenSearch Admin API Index Operations
- thorsten phpMyFAQ
- Cross-site request forgery (CSRF)
- CVSS 7.0 High
phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta IDOR Leaks TOTP Secret via /admin/api/user/data
- thorsten phpMyFAQ
- Broken access control
- CVSS 6.9 Medium
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Information Disclosure via open-questions API
- thorsten phpMyFAQ
- Information disclosure
- CVSS 5.1 Medium
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Stored XSS via SVG DTD Entity Bypass
- thorsten phpMyFAQ
- Cross-site scripting (XSS)
- CVSS 6.9 Medium
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass via Comments and Attachments API
- thorsten phpMyFAQ
- Broken access control
- CVSS 8.7 High
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Unauthenticated DoS via API Pagination
- thorsten phpMyFAQ
- Denial of service
- CVSS 5.3 Medium
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Draft FAQ Attachment Disclosure via attachment.php
- thorsten phpMyFAQ
- Broken access control
- CVSS 7.7 High
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Account Takeover via Keycloak Implicit Account Linking
- thorsten phpMyFAQ
- Authentication bypass
- CVSS 7.1 High
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass in Attachment Administration Endpoints
- thorsten phpMyFAQ
- Broken access control
- CVSS 5.1 Medium
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Stored XSS via SVG Upload Sanitizer Bypass
- thorsten phpMyFAQ
- CWE-182
- CVSS 7.6 High
phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta Account Takeover via Entra ID preferred_username
- thorsten phpMyFAQ
- Authentication bypass
- CVSS 5.1 Medium
phpMyFAQ 3.2.1 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Stored XSS via iframe data: URI
- thorsten phpMyFAQ
- Cross-site scripting (XSS)
- CVSS 8.5 High
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions API
- thorsten phpMyFAQ
- Privilege escalation
- CVSS 6.9 Medium
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Rate Limiting on Password-Reset Endpoints
- thorsten phpMyFAQ
- Authentication bypass
- CVSS 7.0 High
phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via Group Permissions API
- thorsten phpMyFAQ
- Privilege escalation
- CVSS 7.0 High
phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via updateUserRights
- thorsten phpMyFAQ
- Privilege escalation
- CVSS 5.3 Medium
phpMyFAQ 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Authorization via Admin Dashboard
- thorsten phpMyFAQ
- Broken access control
- CVSS 5.1 Medium
phpMyFAQ 4.0.0 before 4.1.9 Incorrect Authorization via news update API
- thorsten phpMyFAQ
- Broken access control
- CVSS 6.9 Medium
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Account Enumeration via Guest Comment Endpoint
- thorsten phpMyFAQ
- CWE-204
- CVSS 7.1 High
phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta 2FA Brute-Force via remove-twofactor Endpoint
- thorsten phpMyFAQ
- Authentication bypass
- CVSS 7.0 High
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Authorization via deleteGroup API
- thorsten phpMyFAQ
- CWE-1220
- CVSS 8.7 High
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Current-Password Step-Up on E-mail Change Enables Account Takeover
- thorsten phpMyFAQ
- CWE-308
- CVSS 8.6 High
phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta TOTP 2FA Bypass via SSO Callbacks
- thorsten phpMyFAQ
- Authentication bypass
- CVSS 9.2 CriticalCritical · CVSS 9+
phpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search Endpoint
- thorsten phpMyFAQ
- SQL injection
- CVSS 4.8 Medium
phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq_search Tool
- thorsten phpMyFAQ
- Broken access control
- CVSS 5.1 Medium
phpMyFAQ before 4.1.8 Stored XSS via html_entity_decode
- thorsten phpMyFAQ
- Cross-site scripting (XSS)
- CVSS 6.3 Medium
phpMyFAQ before 4.1.8 Authorization Bypass via question/create
- thorsten phpMyFAQ
- Broken access control
- CVSS 7.1 High
phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Change
- thorsten phpMyFAQ
- CWE-620
- CVSS 7.1 High
phpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor Disable
- thorsten phpMyFAQ
- CWE-308
- CVSS 5.3 Medium
phpMyFAQ before 4.2.0-alpha.2 Missing Authorization via Dashboard API
- thorsten phpMyFAQ
- Broken access control
- CVSS 5.3 Medium
phpMyFAQ before 4.1.8 TOTP Secret Exposure via Data Export
- thorsten phpMyFAQ
- Information disclosure
- CVSS 5.3 Medium
phpMyFAQ before 4.1.8 Incorrect Authorization via Admin Pages
- thorsten phpMyFAQ
- Broken access control
- CVSS 6.9 Medium
phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter
- thorsten phpMyFAQ
- CWE-799
- CVSS 6.9 Medium
phpMyFAQ before 4.1.7 Missing Authorization via child resources
- thorsten phpMyFAQ
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge
- thorsten phpMyFAQ
- Authentication bypass
- CVSS 9.1 CriticalCritical · CVSS 9+
phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle
- thorsten phpMyFAQ
- Authentication bypass
- CVSS 6.9 Medium
phpMyFAQ before 4.1.7 LIKE Wildcard Injection via PostgreSQL
- thorsten phpMyFAQ
- Command injection
- CVSS 5.3 Medium
phpMyFAQ before 4.1.7 Information Disclosure via Admin API
- thorsten phpMyFAQ
- Broken access control
- CVSS 7.1 High
phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
- thorsten phpMyFAQ
- Path traversal
- CVSS 5.3 Medium
phpMyFAQ before v4.1.6 Registration Bypass via API
- thorsten phpMyFAQ
- Broken access control
- CVSS 8.8 High
phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP
- thorsten phpMyFAQ
- CWE-778
- CVSS 8.6 High
phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookie
- thorsten phpMyFAQ
- Authentication bypass
- CVSS 6.9 Medium
phpMyFAQ before 4.1.7 Information Disclosure via PDF Export
- thorsten phpMyFAQ
- Information disclosure
- CVSS 8.6 High
phpMyFAQ before 4.1.7 SQL Injection via Glossary
- thorsten phpMyFAQ
- SQL injection
- CVSS 6.0 Medium
phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIP
- thorsten phpMyFAQ
- CWE-377
- CVSS 6.9 Medium
phpMyFAQ before 4.1.7 Authentication Bypass via Setup API
- thorsten phpMyFAQ
- Authentication bypass
- CVSS 8.7 High
phpMyFAQ before 4.1.7 Authentication Bypass via Tracking File
- thorsten phpMyFAQ
- Information disclosure
- CVSS 8.5 High
phpMyFAQ before 4.1.6 Privilege Escalation via Group Membership
- thorsten phpMyFAQ
- Privilege escalation
- CVSS 9.4 CriticalCritical · CVSS 9+
phpMyFAQ before 4.1.6 Remote Code Execution via Configuration API
- thorsten phpMyFAQ
- CWE-494
- CVSS 8.6 High
phpMyFAQ before 4.1.6 Path Traversal via category image deletion
- thorsten phpMyFAQ
- Path traversal