CVE-2026-75919: Missing Authentication for Critical Function

phpMyFAQ before 4.1.7 contains an authentication bypass vulnerability in SetupController that allows unauthenticated attackers to run database migrations and create configuration backups when maintenance mode is enabled. Attackers can call POST /api/setup/update-database and POST /api/setup/backu...

phpMyFAQ - Unauth Config Backup Download (CVE-2025-69200)

Triggers POST /api/setup/backup without authentication and downloads the generated configuration ZIP may contain database.php credentials — CVE-2025-69200. !/usr/bin/env python3 -- coding: utf-8 -- """phpMyFAQ unauthenticated config backup download CVE-2025-69200.""" import json import re from...

phpMyFAQ - Unauth Config Backup Detection (CVE-2025-69200)

phpMyFAQ = 4.1.0-RC / 4.0.16 allows unauthenticated POST /api/setup/backup to generate and expose a configuration ZIP containing database credentials CVE-2025-69200 / GHSA-9cg9-4h4f-j6fg. !/usr/bin/env python3 -- coding: utf-8 -- """phpMyFAQ unauthenticated config backup via /api/setup/backup...

phpMyFAQ 4.0.16 - Improper Authorization

Exploit Title: phpMyFAQ = 4.0.16 - Improper Authorization Google Dork: N/A Date: 2026-01-23 Exploit Author: GUIA BRAHIM FOUAD Vendor Homepage: https://www.phpmyfaq.de/ Software Link: https://www.phpmyfaq.de/download/ Version: = 4.0.16 REQUIRED Tested on: Ubuntu 22.04, Apache 2.4.52, PHP 8.2.x,...

CVE-2026-24421

phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below have flawed authorization logic which exposes the /api/setup/backup endpoint to any authenticated user despite their permissions. SetupController.php uses userIsAuthenticated but does not verify that the requester has...

CVE-2026-24421

phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below have flawed authorization logic which exposes the /api/setup/backup endpoint to any authenticated user despite their permissions. SetupController.php uses userIsAuthenticated but does not verify that the requester has...

CVE-2026-24421

Summary: CVE-2026-24421 affects phpMyFAQ before 4.0.17. Versions 4.0.16 and earlier have flawed authorization logic that exposes the /api/setup/backup endpoint to any authenticated user. The code uses userIsAuthenticated() without verifying configuration/admin permissions, allowing non-admin user...

CVE-2025-69200

phpMyFAQ is an open source FAQ web application. In versions prior to 4.0.16, an unauthenticated remote attacker can trigger generation of a configuration backup ZIP via POST /api/setup/backup and then download the generated ZIP from a web-accessible location. The ZIP contains sensitive...

CVE-2025-69200

phpMyFAQ is an open source FAQ web application. In versions prior to 4.0.16, an unauthenticated remote attacker can trigger generation of a configuration backup ZIP via "POST /api/setup/backup" and then download the generated ZIP from a web-accessible location. The ZIP contains sensitive...

CVE-2025-69200: Exposure of Sensitive Information Through Data Queries

phpMyFAQ is an open source FAQ web application. In versions prior to 4.0.16, an unauthenticated remote attacker can trigger generation of a configuration backup ZIP via POST /api/setup/backup and then download the generated ZIP from a web-accessible location. The ZIP contains sensitive...