Known vulnerabilities in phpMyFAQ - page 2

Software: phpMyFAQ
Software CPE: cpe:2.3:a:thorsten_rinne:phpmyfaq:*:*:*:*:*:*:*:*
Total vulnerabilities: 92
Public exploits: 12
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting phpMyFAQ phpMyFAQ is affected by 92 known vulnerabilities: 9 high, 37 medium, 46 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140898 - Missing Authorization
CVE-2026-76215
CWE-862 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140900 - Missing Authorization
CWE-862 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140901 - Missing Authorization
CWE-862 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140896 - Authentication Bypass by Capture-replay
CVE-2026-76214
CWE-294 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU140894 - Improper Restriction of Excessive Authentication Attempts
CVE-2026-76213
CWE-307 Medium
No
No
4.1.7 04.08.2026 SB2026080470
#VU137471 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-66397
CWE-22 Medium
No
No
4.1.6 14.07.2026 SB2026071455
#VU137470 - Download of Code Without Integrity Check
CVE-2026-66398
CWE-494 Medium
No
No
4.1.6 14.07.2026 SB2026071455
#VU137465 - Improper Authentication
CVE-2026-56737
CWE-287 High
No
No
4.1.6 14.07.2026 SB2026071455
#VU137464 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-56738
CWE-89 Low
No
No
4.1.6 14.07.2026 SB2026071455
#VU137463 - Improper Privilege Management
CVE-2026-66399
CWE-269 Low
No
No
4.1.6 14.07.2026 SB2026071455
#VU137462 - Missing Authorization
CVE-2026-57996
CWE-862 Medium
No
No
4.1.5 14.07.2026 SB2026071454
#VU137461 - Improper Privilege Management
CVE-2026-57995
CWE-269 Medium
No
No
4.1.5 14.07.2026 SB2026071454
#VU137460 - Incorrect Authorization
CVE-2026-57994
CWE-863 Medium
No
No
4.1.5 14.07.2026 SB2026071454
#VU137459 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-57961
CWE-22 Low
No
No
4.1.5 14.07.2026 SB2026071454
#VU137458 - Use of Weak Hash
CVE-2026-48488
CWE-328 Medium
No
No
4.1.4 14.07.2026 SB2026071453
#VU137457 - Missing Authorization
CVE-2026-56396
CWE-862 Medium
No
No
4.1.4 14.07.2026 SB2026071453
#VU137456 - Missing Authorization
CVE-2026-49205
CWE-862 Low
No
No
4.1.4 14.07.2026 SB2026071453
#VU131754 - Weak password recovery mechanism
CVE-2026-35675
CWE-640 High
No
No
4.1.3 18.05.2026 SB2026051896
#VU131753 - Authorization Bypass Through User-Controlled Key
CVE-2026-35671
CWE-639 Medium
No
No
4.1.3 18.05.2026 SB2026051896
#VU131752 - Insecure Default Initialization of Resource
CVE-2026-35672
CWE-1188 Medium
No
No
4.1.3 18.05.2026 SB2026051896


Showing elements 21 - 40 out of 92