114507 matches found
CVE-2026-111905
The software phpMyFAQ versions 3.2.0 (before 4.1.9) and 4.2.0-alpha (before 4.2.0-beta) is vulnerable to an Insecure Direct Object Reference (IDOR) in the GET /admin/api/user/data/{userId} endpoint. The root cause is the lack of a SuperAdmin or protected-target check, allowing the API to return t...
CVE-2026-111893
The phpMyFAQ application (versions 4.2.0-alpha before 4.2.0-beta ) contains a privilege escalation vulnerability within the GroupController::saveCategoryRestrictions() function. Due to improper privilege management (CWE-269 ), delegated administrators can bypass restrictions by sending a POST req...
EUVD-2026-103326
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupController::saveCategoryRestrictions that lets delegated administrators assign categories outside their own scope. Category-restricted administrators can POST to /admin/api/group/category-restrictions wit...
CVE-2026-111893 phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions API
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupController::saveCategoryRestrictions that lets delegated administrators assign categories outside their own scope. Category-restricted administrators can POST to /admin/api/group/category-restrictions wit...
CVE-2026-111893 phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions API
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupController::saveCategoryRestrictions that lets delegated administrators assign categories outside their own scope. Category-restricted administrators can POST to /admin/api/group/category-restrictions wit...
CVE-2026-111893 phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions API
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupController::saveCategoryRestrictions that lets delegated administrators assign categories outside their own scope. Category-restricted administrators can POST to /admin/api/group/category-restrictions wit...
CVE-2026-111888
The phpMyFAQ software (versions 4.0.0 before 4.1.9 ) is vulnerable to an incorrect authorization flaw in the news update API. The root cause is that the PUT /admin/api/news/update endpoint incorrectly validates the NEWS_DELETE permission instead of the required NEWS_EDIT right. Consequently, dele...
CVE-2026-111888 phpMyFAQ 4.0.0 before 4.1.9 Incorrect Authorization via news update API
phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows delegated admins lacking the editnews right to modify news by calling PUT /admin/api/news/update, which checks NEWSDELETE instead of NEWSEDIT. Attackers holding addnews and delnews can read the...
CVE-2026-111889 phpMyFAQ 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Authorization via Admin Dashboard
phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in the admin dashboard that allows authenticated users without admin rights to view restricted data. Attackers with any activated account can request /admin/index.php/ to read...
EUVD-2026-103330
phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in the admin dashboard that allows authenticated users without admin rights to view restricted data. Attackers with any activated account can request /admin/index.php/ to read...
EUVD-2026-103331
phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows delegated admins lacking the editnews right to modify news by calling PUT /admin/api/news/update, which checks NEWSDELETE instead of NEWSEDIT. Attackers holding addnews and delnews can read the...
CVE-2026-111888 phpMyFAQ 4.0.0 before 4.1.9 Incorrect Authorization via news update API
phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows delegated admins lacking the editnews right to modify news by calling PUT /admin/api/news/update, which checks NEWSDELETE instead of NEWSEDIT. Attackers holding addnews and delnews can read the...
CVE-2026-111889 phpMyFAQ 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Authorization via Admin Dashboard
phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in the admin dashboard that allows authenticated users without admin rights to view restricted data. Attackers with any activated account can request /admin/index.php/ to read...
CVE-2026-111888 phpMyFAQ 4.0.0 before 4.1.9 Incorrect Authorization via news update API
phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows delegated admins lacking the editnews right to modify news by calling PUT /admin/api/news/update, which checks NEWSDELETE instead of NEWSEDIT. Attackers holding addnews and delnews can read the...
CVE-2026-111889
The phpMyFAQ application versions 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta are vulnerable to a missing authorization flaw in the admin dashboard. This vulnerability allows authenticated users lacking administrator privileges to access restricted data by requesting /admin/index.php/. I...
CVE-2026-111889
phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in the admin dashboard that allows authenticated users without admin rights to view restricted data. Attackers with any activated account can request /admin/index.php/ to read...
CVE-2026-111885 phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Authorization via deleteGroup API
phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in GroupController::deleteGroup that omits privilege-level checks on target groups. Authenticated non-SuperAdmin administrators holding GROUPDELETE can send a crafted groupId to /admin/api/group/delete to...
EUVD-2026-103334
phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in GroupController::deleteGroup that omits privilege-level checks on target groups. Authenticated non-SuperAdmin administrators holding GROUPDELETE can send a crafted groupId to /admin/api/group/delete to...
CVE-2022-47872
CVE-2022-47872 maccms10 admin+ ssrf attacks Overview Manufacturer's website information：https://maccms.pro Source code download address ： https://github.com/maccmspro/maccms10.git Affected version: V2021.1000.2000 2.Vulnerability details https://github.com/maccmspro/maccms10/issues/22 Enter the...
CVE-2026-102261
CVE-2026-102261 This project contains a non-destructive checker to confirm whether an authorized instance of Camaleon CMS enforces the authorization introduced in version 2.9.3. Scope The issue affects POST /admin/media/crop in Camaleon CMS up to 2.9.2. A user with :manage, :media, but without...