Known vulnerabilities in phpMyFAQ - page 3

Software: phpMyFAQ
Software CPE: cpe:2.3:a:thorsten_rinne:phpmyfaq:*:*:*:*:*:*:*:*
Total vulnerabilities: 84
Public exploits: 12
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting phpMyFAQ phpMyFAQ is affected by 84 known vulnerabilities: 9 high, 36 medium, 39 low Critical High Medium Low

Vulnerabilities (84)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130125 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130118 - Incorrect Authorization
CWE-863 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130117 - Improper Restriction of Excessive Authentication Attempts
CWE-307 High
No
No
4.1.2 05.05.2026 SB20260505101
#VU130116 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 Medium
No
No
4.1.2 05.05.2026 SB20260505101
#VU130115 - Incorrect Authorization
CWE-863 Medium
No
No
4.1.2 05.05.2026 SB20260505101
#VU130114 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130113 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
4.1.2 05.05.2026 SB20260505101
#VU126927 - Improper Access Control
CVE-2025-59943
CWE-284 Medium
Available
No
4.0.13 23.04.2026 SB2026042350
#VU126926 - Exposure of Sensitive Information Through Data Queries
CVE-2025-69200
CWE-202 Medium
Available
No
4.0.16 23.04.2026 SB2026042349
#VU126912 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-68951
CWE-79 Low
No
No
4.0.16 23.04.2026 SB2026042349
#VU126895 - Missing Authorization
CVE-2026-27836
CWE-862 Medium
Available
No
4.0.18 23.04.2026 SB2026042346
#VU126889 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34729
CWE-79 Low
Available
No
4.1.1 23.04.2026 SB2026042343
#VU126888 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-34728
CWE-22 Medium
Available
No
4.1.1 23.04.2026 SB2026042343
#VU126886 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34974
CWE-79 Low
Available
No
4.1.1 23.04.2026 SB2026042343
#VU126885 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-34973
CWE-943 Medium
Available
No
4.1.1 23.04.2026 SB2026042343
#VU126884 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-32629
CWE-79 Low
Available
No
4.1.1 23.04.2026 SB2026042343
#VU122037 - Exposure of sensitive information to an unauthorized actor
CVE-2026-24422
CWE-200 Medium
Available
No
4.0.17 26.01.2026 SB2026012639
#VU122036 - Missing Authorization
CVE-2026-24421
CWE-862 Medium
Available
No
4.0.17 26.01.2026 SB2026012639
#VU122034 - Improper Access Control
CVE-2026-24420
CWE-284 Medium
Available
No
4.0.17 26.01.2026 SB2026012639
#VU118644 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-62519
CWE-89 Low
Available
No
4.0.14 20.11.2025 SB2025112026


Showing elements 41 - 60 out of 84