Skip to content
OpenAdvisories

Package · Packagist

phpmyfaq/phpmyfaq

47 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-46364 Scanner template

    phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptcha

    phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha::garbageCollector() and BuiltinCaptcha::saveCaptcha() methods that interpolate unsanitized User-Agent headers into DELETE and INSERT queries. Unauthenticated attac…

    thorsten phpMyFAQ thorsten/phpmyfaq phpmyfaq/phpmyfaq Packagist
  • Critical 9.1
    CVE-2026-45010

    phpMyFAQ - Unauthenticated Two-Factor Authentication Brute-Force via /admin/check Endpoint

    phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts vulnerability in the /admin/check endpoint, which accepts arbitrary user-id parameters without session binding or rate limiting. Unauthenticated attackers can brute-fo…

    thorsten phpMyFAQ thorsten/phpmyfaq phpmyfaq/phpmyfaq Packagist