agentprime: thorsten-phpmyfaq

agentprime: thorsten-phpmyfaqEvery new CVE for thorsten-phpmyfaq.https://agentprime.io/CVE-2026-116183: phpMyFAQ before 4.1.10 Authorization Bypass via /api/faq/create openQuestionIDhttps://agentprime.io/advisories/CVE-2026-116183/https://agentprime.io/advisories/CVE-2026-116183/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:21 GMTCVECVE-2026-116182: phpMyFAQ before 4.1.10 SSRF via PDF Export Image Fetchinghttps://agentprime.io/advisories/CVE-2026-116182/https://agentprime.io/advisories/CVE-2026-116182/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 13:20:20 GMTCVECVE-2026-111911: phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via WebAuthn Credential Injectionhttps://agentprime.io/advisories/CVE-2026-111911/https://agentprime.io/advisories/CVE-2026-111911/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:28 GMTCVEcriticalCVE-2026-111910: phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Authorization Bypass via attachment.php Downloadshttps://agentprime.io/advisories/CVE-2026-111910/https://agentprime.io/advisories/CVE-2026-111910/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:28 GMTCVECVE-2026-111909: phpMyFAQ before 4.1.9 Missing Authorization Allows Superadmin Deletion via deleteUser APIhttps://agentprime.io/advisories/CVE-2026-111909/https://agentprime.io/advisories/CVE-2026-111909/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:27 GMTCVECVE-2026-111908: phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta BOLA in FAQ Update via REST APIhttps://agentprime.io/advisories/CVE-2026-111908/https://agentprime.io/advisories/CVE-2026-111908/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:26 GMTCVECVE-2026-111907: phpMyFAQ 4.0.0 before 4.1.9 CSRF via /admin/api/update-databasehttps://agentprime.io/advisories/CVE-2026-111907/https://agentprime.io/advisories/CVE-2026-111907/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:26 GMTCVECVE-2026-111906: phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta CSRF in Elasticsearch/OpenSearch Admin API Index Operationshttps://agentprime.io/advisories/CVE-2026-111906/https://agentprime.io/advisories/CVE-2026-111906/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:25 GMTCVECVE-2026-111905: phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta IDOR Leaks TOTP Secret via /admin/api/user/datahttps://agentprime.io/advisories/CVE-2026-111905/https://agentprime.io/advisories/CVE-2026-111905/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:24 GMTCVECVE-2026-111904: phpMyFAQ 4.2.0-alpha before 4.2.0-beta Information Disclosure via open-questions APIhttps://agentprime.io/advisories/CVE-2026-111904/https://agentprime.io/advisories/CVE-2026-111904/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:24 GMTCVECVE-2026-111903: phpMyFAQ 4.2.0-alpha before 4.2.0-beta Stored XSS via SVG DTD Entity Bypasshttps://agentprime.io/advisories/CVE-2026-111903/https://agentprime.io/advisories/CVE-2026-111903/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:23 GMTCVECVE-2026-111902: phpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass via Comments and Attachments APIhttps://agentprime.io/advisories/CVE-2026-111902/https://agentprime.io/advisories/CVE-2026-111902/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:22 GMTCVECVE-2026-111901: phpMyFAQ 4.2.0-alpha before 4.2.0-beta Unauthenticated DoS via API Paginationhttps://agentprime.io/advisories/CVE-2026-111901/https://agentprime.io/advisories/CVE-2026-111901/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:22 GMTCVECVE-2026-111900: phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Draft FAQ Attachment Disclosure via attachment.phphttps://agentprime.io/advisories/CVE-2026-111900/https://agentprime.io/advisories/CVE-2026-111900/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:21 GMTCVECVE-2026-111898: phpMyFAQ 4.2.0-alpha before 4.2.0-beta Account Takeover via Keycloak Implicit Account Linkinghttps://agentprime.io/advisories/CVE-2026-111898/https://agentprime.io/advisories/CVE-2026-111898/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:20 GMTCVECVE-2026-111897: phpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass in Attachment Administration Endpointshttps://agentprime.io/advisories/CVE-2026-111897/https://agentprime.io/advisories/CVE-2026-111897/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:19 GMTCVECVE-2026-111896: phpMyFAQ 4.2.0-alpha before 4.2.0-beta Stored XSS via SVG Upload Sanitizer Bypasshttps://agentprime.io/advisories/CVE-2026-111896/https://agentprime.io/advisories/CVE-2026-111896/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:19 GMTCVECVE-2026-111895: phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta Account Takeover via Entra ID preferred_usernamehttps://agentprime.io/advisories/CVE-2026-111895/https://agentprime.io/advisories/CVE-2026-111895/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:18 GMTCVECVE-2026-111894: phpMyFAQ 3.2.1 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Stored XSS via iframe data: URIhttps://agentprime.io/advisories/CVE-2026-111894/https://agentprime.io/advisories/CVE-2026-111894/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:17 GMTCVECVE-2026-111893: phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions APIhttps://agentprime.io/advisories/CVE-2026-111893/https://agentprime.io/advisories/CVE-2026-111893/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:17 GMTCVECVE-2026-111892: phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Rate Limiting on Password-Reset Endpointshttps://agentprime.io/advisories/CVE-2026-111892/https://agentprime.io/advisories/CVE-2026-111892/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:15 GMTCVECVE-2026-111891: phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via Group Permissions APIhttps://agentprime.io/advisories/CVE-2026-111891/https://agentprime.io/advisories/CVE-2026-111891/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:15 GMTCVECVE-2026-111890: phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via updateUserRightshttps://agentprime.io/advisories/CVE-2026-111890/https://agentprime.io/advisories/CVE-2026-111890/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:14 GMTCVECVE-2026-111889: phpMyFAQ 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Authorization via Admin Dashboardhttps://agentprime.io/advisories/CVE-2026-111889/https://agentprime.io/advisories/CVE-2026-111889/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:13 GMTCVECVE-2026-111888: phpMyFAQ 4.0.0 before 4.1.9 Incorrect Authorization via news update APIhttps://agentprime.io/advisories/CVE-2026-111888/https://agentprime.io/advisories/CVE-2026-111888/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:13 GMTCVECVE-2026-111887: phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Account Enumeration via Guest Comment Endpointhttps://agentprime.io/advisories/CVE-2026-111887/https://agentprime.io/advisories/CVE-2026-111887/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:12 GMTCVECVE-2026-111886: phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta 2FA Brute-Force via remove-twofactor Endpointhttps://agentprime.io/advisories/CVE-2026-111886/https://agentprime.io/advisories/CVE-2026-111886/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:11 GMTCVECVE-2026-111885: phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Authorization via deleteGroup APIhttps://agentprime.io/advisories/CVE-2026-111885/https://agentprime.io/advisories/CVE-2026-111885/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:11 GMTCVECVE-2026-111884: phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Current-Password Step-Up on E-mail Change Enables Account Takeoverhttps://agentprime.io/advisories/CVE-2026-111884/https://agentprime.io/advisories/CVE-2026-111884/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:10 GMTCVECVE-2026-111882: phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta TOTP 2FA Bypass via SSO Callbackshttps://agentprime.io/advisories/CVE-2026-111882/https://agentprime.io/advisories/CVE-2026-111882/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 18:46:09 GMTCVECVE-2026-109573: phpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search Endpointhttps://agentprime.io/advisories/CVE-2026-109573/https://agentprime.io/advisories/CVE-2026-109573/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 22:21:49 GMTCVEcriticalCVE-2026-108851: phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq_search Toolhttps://agentprime.io/advisories/CVE-2026-108851/https://agentprime.io/advisories/CVE-2026-108851/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 13:26:01 GMTCVECVE-2026-85593: phpMyFAQ before 4.1.8 Stored XSS via html_entity_decodehttps://agentprime.io/advisories/CVE-2026-85593/https://agentprime.io/advisories/CVE-2026-85593/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 11:29:58 GMTCVECVE-2026-85592: phpMyFAQ before 4.1.8 Authorization Bypass via question/createhttps://agentprime.io/advisories/CVE-2026-85592/https://agentprime.io/advisories/CVE-2026-85592/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 11:29:57 GMTCVECVE-2026-85591: phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Changehttps://agentprime.io/advisories/CVE-2026-85591/https://agentprime.io/advisories/CVE-2026-85591/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 11:29:56 GMTCVECVE-2026-85590: phpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor Disablehttps://agentprime.io/advisories/CVE-2026-85590/https://agentprime.io/advisories/CVE-2026-85590/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 11:29:56 GMTCVECVE-2026-85589: phpMyFAQ before 4.2.0-alpha.2 Missing Authorization via Dashboard APIhttps://agentprime.io/advisories/CVE-2026-85589/https://agentprime.io/advisories/CVE-2026-85589/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 11:29:55 GMTCVECVE-2026-85588: phpMyFAQ before 4.1.8 TOTP Secret Exposure via Data Exporthttps://agentprime.io/advisories/CVE-2026-85588/https://agentprime.io/advisories/CVE-2026-85588/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 11:29:54 GMTCVECVE-2026-85587: phpMyFAQ before 4.1.8 Incorrect Authorization via Admin Pageshttps://agentprime.io/advisories/CVE-2026-85587/https://agentprime.io/advisories/CVE-2026-85587/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 11:29:54 GMTCVECVE-2026-85586: phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameterhttps://agentprime.io/advisories/CVE-2026-85586/https://agentprime.io/advisories/CVE-2026-85586/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 11:29:53 GMTCVECVE-2026-76215: phpMyFAQ before 4.1.7 Missing Authorization via child resourceshttps://agentprime.io/advisories/CVE-2026-76215/https://agentprime.io/advisories/CVE-2026-76215/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 14:02:00 GMTCVECVE-2026-76214: phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challengehttps://agentprime.io/advisories/CVE-2026-76214/https://agentprime.io/advisories/CVE-2026-76214/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 14:01:59 GMTCVEcriticalCVE-2026-76213: phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttlehttps://agentprime.io/advisories/CVE-2026-76213/https://agentprime.io/advisories/CVE-2026-76213/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 14:01:59 GMTCVEcriticalCVE-2026-76212: phpMyFAQ before 4.1.7 LIKE Wildcard Injection via PostgreSQLhttps://agentprime.io/advisories/CVE-2026-76212/https://agentprime.io/advisories/CVE-2026-76212/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 14:01:58 GMTCVECVE-2026-76211: phpMyFAQ before 4.1.7 Information Disclosure via Admin APIhttps://agentprime.io/advisories/CVE-2026-76211/https://agentprime.io/advisories/CVE-2026-76211/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 14:01:57 GMTCVECVE-2026-76210: phpMyFAQ before v4.1.6 Local File Disclosure via PDF Exporthttps://agentprime.io/advisories/CVE-2026-76210/https://agentprime.io/advisories/CVE-2026-76210/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 14:01:57 GMTCVECVE-2026-76209: phpMyFAQ before v4.1.6 Registration Bypass via APIhttps://agentprime.io/advisories/CVE-2026-76209/https://agentprime.io/advisories/CVE-2026-76209/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 14:01:56 GMTCVECVE-2026-76208: phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAPhttps://agentprime.io/advisories/CVE-2026-76208/https://agentprime.io/advisories/CVE-2026-76208/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 14:01:55 GMTCVECVE-2026-76207: phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookiehttps://agentprime.io/advisories/CVE-2026-76207/https://agentprime.io/advisories/CVE-2026-76207/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 14:01:55 GMTCVECVE-2026-76206: phpMyFAQ before 4.1.7 Information Disclosure via PDF Exporthttps://agentprime.io/advisories/CVE-2026-76206/https://agentprime.io/advisories/CVE-2026-76206/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 14:01:54 GMTCVE