📦

phpmyfaq

Vendor: phpmyfaq

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 23 Code Available
Total RCEs 8 Remote Access
Total CVEs 668 Total Indexed
Avg. EPSS 1.36% Exploit Prob.
Latest CVE CVE-2026-34974 Apr 02

Security Vulnerability Index

Page 11 / 67
2.7 CVSS
CVE-2014-6049
Exploit Found

phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted instance ID parameter.

EPSS: 3.19%
5.3 CVSS
CVE-2014-6048
Exploit Found

phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request.

EPSS: 5.68%
5.3 CVSS
CVE-2014-6047
Exploit Found

phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks.

EPSS: 5.68%
8.8 CVSS
CVE-2014-6046
Exploit Found

Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecified users for requests that (1) delete active users by leveraging improper validation of CSRF tokens or that (2) delete open questions, (3) activate users, (4) publish FAQs, (5) add or delete Glossary, (6) add or delete FAQ news, or (7) add or delete comments or add votes by leveraging lack of a CSRF token.

EPSS: 1.93%
7.2 CVSS
CVE-2014-6045
Exploit Found

SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the restore function.

EPSS: 2.09%
6.1 CVSS
CVE-2017-15809

In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag.

EPSS: 0.62%
8.8 CVSS
CVE-2017-15808
Exploit Found

In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php.

EPSS: 1.17%
8.8 CVSS
CVE-2017-15735
Exploit Found

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a glossary.

EPSS: 1.10%
8.8 CVSS
CVE-2017-15734
Exploit Found

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.php.

EPSS: 1.10%
8.8 CVSS
CVE-2017-15733

In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and admin/att.main.php.

EPSS: 0.58%