Skip to content
OpenAdvisories

Product · thorsten

phpMyFAQ

109 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-111911

    phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via WebAuthn Credential Injection

    phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints attach credentials to any account without authentication or challenge validation. Attackers can stage a victim username, submit a forged fmt=none…

    thorsten phpMyFAQ
  • Critical 9.4
    CVE-2026-66398

    phpMyFAQ before 4.1.6 Remote Code Execution via Configuration API

    phpMyFAQ before v4.1.6 contains a remote code execution vulnerability in the configuration API that allows authenticated administrators with CONFIGURATION_EDIT and ATTACHMENT_ADD privileges to write arbitrary PHP files by manipulating the upgrade.lastDownload…

    thorsten phpMyFAQ
  • Critical 9.8
    CVE-2026-46364 Scanner template

    phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptcha

    phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha::garbageCollector() and BuiltinCaptcha::saveCaptcha() methods that interpolate unsanitized User-Agent headers into DELETE and INSERT queries. Unauthenticated attac…

    thorsten phpMyFAQ thorsten/phpmyfaq phpmyfaq/phpmyfaq Packagist
  • Critical 9.1
    CVE-2026-45010

    phpMyFAQ - Unauthenticated Two-Factor Authentication Brute-Force via /admin/check Endpoint

    phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts vulnerability in the /admin/check endpoint, which accepts arbitrary user-id parameters without session binding or rate limiting. Unauthenticated attackers can brute-fo…

    thorsten phpMyFAQ thorsten/phpmyfaq phpmyfaq/phpmyfaq Packagist