Known vulnerabilities in phpMyFAQ 2.5.2 - page 2

Software: phpMyFAQ
Version: 2.5.2
Software CPE: cpe:2.3:a:thorsten_rinne:phpmyfaq:*:*:*:*:*:*:*:*
Total vulnerabilities: 46
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting phpMyFAQ version 2.5.2 phpMyFAQ 2.5.2 is affected by 46 vulnerabilities: 6 high, 19 medium, 21 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131754 - Weak password recovery mechanism
CWE-640 High
No
No
4.1.3 18.05.2026 SB2026051896
#VU131752 - Insecure Default Initialization of Resource
CWE-1188 Medium
No
No
4.1.3 18.05.2026 SB2026051896
#VU130124 - Incorrect Authorization
CWE-863 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130123 - Missing Authorization
CWE-862 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130122 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130121 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130120 - Missing Authorization
CWE-862 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130119 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130117 - Improper Restriction of Excessive Authentication Attempts
CWE-307 High
No
No
4.1.2 05.05.2026 SB20260505101
#VU130116 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Medium
No
No
4.1.2 05.05.2026 SB20260505101
#VU130115 - Incorrect Authorization
CWE-863 Medium
No
No
4.1.2 05.05.2026 SB20260505101
#VU130114 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130113 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
4.1.2 05.05.2026 SB20260505101
#VU130103 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2024-56199
CWE-80 Low
No
No
4.0.2 02.01.2025 SB2025010207
#VU130104 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-55889
CWE-451 Low
No
No
3.2.10 13.12.2024 SB2024121368
#VU130112 - Improper Access Control
CVE-2024-22202
CWE-284 Low
No
No
3.2.5 05.02.2024 SB2024020554
#VU130111 - Improper Access Control
CVE-2024-22208
CWE-284 Medium
No
No
4.0.0 05.02.2024 SB2024020555
#VU71381 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0313
CWE-79 Low
No
No
3.1.10 20.01.2023 SB2023011928
#VU71348 - Improper Authentication
CVE-2023-0311
CWE-287 Medium
No
No
3.1.10 19.01.2023 SB2023011928
#VU71347 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0312
CWE-79 Low
No
No
3.1.10 19.01.2023 SB2023011928


Showing elements 21 - 40 out of 46