Known vulnerabilities in phpMyFAQ - page 4

Software: phpMyFAQ
Software CPE: cpe:2.3:a:thorsten_rinne:phpmyfaq:*:*:*:*:*:*:*:*
Total vulnerabilities: 92
Public exploits: 12
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting phpMyFAQ phpMyFAQ is affected by 92 known vulnerabilities: 9 high, 37 medium, 46 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126889 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34729
CWE-79 Low
Available
No
4.1.1 23.04.2026 SB2026042343
#VU126886 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34974
CWE-79 Low
Available
No
4.1.1 23.04.2026 SB2026042343
#VU126885 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-34973
CWE-943 Medium
Available
No
4.1.1 23.04.2026 SB2026042343
#VU126884 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-32629
CWE-79 Low
Available
No
4.1.1 23.04.2026 SB2026042343
#VU122037 - Exposure of sensitive information to an unauthorized actor
CVE-2026-24422
CWE-200 Medium
Available
No
4.0.17 26.01.2026 SB2026012639
#VU122036 - Missing Authorization
CVE-2026-24421
CWE-862 Medium
Available
No
4.0.17 26.01.2026 SB2026012639
#VU122034 - Improper Access Control
CVE-2026-24420
CWE-284 Medium
Available
No
4.0.17 26.01.2026 SB2026012639
#VU118644 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-62519
CWE-89 Low
Available
No
4.0.14 20.11.2025 SB2025112026
#VU130103 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2024-56199
CWE-80 Low
No
No
4.0.2 02.01.2025 SB2025010207
#VU130104 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-55889
CWE-451 Low
No
No
3.2.10 13.12.2024 SB2024121368
#VU87806 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-28107
CWE-89 Medium
No
No
3.2.6 26.03.2024 SB2024032627
#VU87805 - Unrestricted Upload of File with Dangerous Type
CVE-2024-28105
CWE-434 Low
No
No
3.2.6 26.03.2024 SB2024032627
#VU87803 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-27299
CWE-89 Medium
No
No
3.2.6 26.03.2024 SB2024032627
#VU87802 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-28106
CWE-79 Low
No
No
3.2.6 26.03.2024 SB2024032627
#VU87801 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-28108
CWE-79 Low
No
No
3.2.6 26.03.2024 SB2024032627
#VU87800 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27300
CWE-79 Low
No
No
3.2.6 26.03.2024 SB2024032627
#VU130107 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29179
CWE-79 Low
No
No
3.2.6 25.03.2024 SB2024032591
#VU130106 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-29196
CWE-22 Low
No
No
3.2.6 25.03.2024 SB2024032591
#VU130112 - Improper Access Control
CVE-2024-22202
CWE-284 Low
No
No
3.2.5 05.02.2024 SB2024020554
#VU130108 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24574
CWE-79 Low
No
No
3.2.5 05.02.2024 SB2024020554


Showing elements 61 - 80 out of 92