Known vulnerabilities in phpMyFAQ - page 3

Software: phpMyFAQ
Software CPE: cpe:2.3:a:thorsten_rinne:phpmyfaq:*:*:*:*:*:*:*:*
Total vulnerabilities: 92
Public exploits: 12
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting phpMyFAQ phpMyFAQ is affected by 92 known vulnerabilities: 9 high, 37 medium, 46 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131755 - Weak password recovery mechanism
CVE-2026-35676
CWE-640 High
No
No
4.1.3 18.05.2026 SB2026051896
#VU131756 - Weak password recovery mechanism
CWE-640 High
No
No
4.1.3 18.05.2026 SB2026051896
#VU130125 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-46367
CWE-79 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130124 - Incorrect Authorization
CVE-2026-46362
CWE-863 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130123 - Missing Authorization
CVE-2026-46365
CWE-862 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130122 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-46363
CWE-79 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130121 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-46360
CWE-79 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130120 - Missing Authorization
CVE-2026-45007
CWE-862 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130119 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-46361
CWE-79 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130118 - Incorrect Authorization
CVE-2026-45009
CWE-863 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130117 - Improper Restriction of Excessive Authentication Attempts
CVE-2026-45010
CWE-307 High
No
No
4.1.2 05.05.2026 SB20260505101
#VU130116 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-46359
CWE-89 Medium
No
No
4.1.2 05.05.2026 SB20260505101
#VU130115 - Incorrect Authorization
CVE-2026-46366
CWE-863 Medium
No
No
4.1.2 05.05.2026 SB20260505101
#VU130114 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-45008
CWE-22 Low
No
No
4.1.2 05.05.2026 SB20260505101
#VU130113 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-46364
CWE-89 High
No
No
4.1.2 05.05.2026 SB20260505101
#VU126927 - Improper Access Control
CVE-2025-59943
CWE-284 Medium
Available
No
4.0.13 23.04.2026 SB2026042350
#VU126926 - Exposure of Sensitive Information Through Data Queries
CVE-2025-69200
CWE-202 Medium
Available
No
4.0.16 23.04.2026 SB2026042349
#VU126912 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-68951
CWE-79 Low
No
No
4.0.16 23.04.2026 SB2026042349
#VU126895 - Missing Authorization
CVE-2026-27836
CWE-862 Medium
Available
No
4.0.18 23.04.2026 SB2026042346
#VU126888 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-34728
CWE-22 Medium
Available
No
4.1.1 23.04.2026 SB2026042343


Showing elements 41 - 60 out of 92