Known vulnerabilities in phpMyFAQ

Software: phpMyFAQ
Software CPE: cpe:2.3:a:thorsten_rinne:phpmyfaq:*:*:*:*:*:*:*:*
Total vulnerabilities: 84
Public exploits: 12
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting phpMyFAQ phpMyFAQ is affected by 84 known vulnerabilities: 9 high, 36 medium, 39 low Critical High Medium Low

Vulnerabilities (84)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140898 - Missing Authorization
CWE-862 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140900 - Missing Authorization
CWE-862 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140901 - Missing Authorization
CWE-862 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140896 - Authentication Bypass by Capture-replay
CWE-294 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140894 - Improper Restriction of Excessive Authentication Attempts
CWE-307 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140891 - Argument Injection or Modification
CWE-88 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140889 - Missing Authorization
CWE-862 Low
No
No
4.1.7 04.08.2026 SB2026080470
#VU140888 - Information Exposure Through an Error Message
CWE-209 Low
No
No
4.1.7 04.08.2026 SB2026080470
#VU140887 - Missing Authorization
CWE-862 Low
No
No
4.1.7 04.08.2026 SB2026080470
#VU140886 - Incorrect Authorization
CWE-863 High
No
No
4.1.7 04.08.2026 SB2026080470
#VU140885 - Missing Critical Step in Authentication
CWE-304 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140884 - Incorrect Authorization
CWE-863 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140883 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140882 - Files or Directories Accessible to External Parties
CWE-552 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140880 - Missing Authentication for Critical Function
CWE-306 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140881 - Missing Authentication for Critical Function
CWE-306 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140879 - Information Exposure Through Log Files
CWE-532 High
No
No
4.1.7 04.08.2026 SB2026080470
#VU137465 - Improper Authentication
CVE-2026-56737
CWE-287 High
No
No
4.1.6 14.07.2026 SB2026071455
#VU137464 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-56738
CWE-89 Low
No
No
4.1.6 14.07.2026 SB2026071455
#VU137463 - Improper Privilege Management
CWE-269 Low
No
No
4.1.6 14.07.2026 SB2026071455


Showing elements 1 - 20 out of 84