CVE-2026-45008 phpMyFAQ - Path Traversal in Client::deleteClientFolder via URL Parameter

phpMyFAQ before 4.1.2 contains a path traversal vulnerability in Client::deleteClientFolder that allows admins with INSTANCEDELETE permission to delete arbitrary directories. Attackers can submit traversal sequences like https://../../../ in the client URL parameter to recursively delete...

EUVD-2026-30593

phpMyFAQ before 4.1.2 contains a path traversal vulnerability in Client::deleteClientFolder that allows admins with INSTANCEDELETE permission to delete arbitrary directories. Attackers can submit traversal sequences like https://../../../ in the client URL parameter to recursively delete...

PT-2023-29270

Name of the Vulnerable Software and Affected Versions wallabag versions prior to 2.6.3 Description The issue is related to Cross-Site Request Forgery CSRF in the wallabag GitHub repository. This allows attackers to arbitrarily delete API keys via the /developer/client/delete/id endpoint...