Lucene search
K

6 matches found

OSV
OSV
added 2026/01/23 8:17 p.m.2 views

GHSA-J4RC-96XJ-GVQC phpMyFAQ: Public API endpoints expose emails and invisible questions

Summary Several public API endpoints return email addresses and non‑public records e.g. open questions with isVisible=false. Details OpenQuestionController::list calls Question::getAll with the default showAll=true, returning invisible questions and their emails. Similar exposures exist in...

5.3CVSS5.5AI score0.00021EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2026/01/23 8:17 p.m.8 views

phpMyFAQ: Public API endpoints expose emails and invisible questions

Summary Several public API endpoints return email addresses and non‑public records e.g. open questions with isVisible=false. Details OpenQuestionController::list calls Question::getAll with the default showAll=true, returning invisible questions and their emails. Similar exposures exist in...

7.5CVSS5.4AI score0.00021EPSS
Exploits1References3Affected Software2
Positive Technologies
Positive Technologies
added 2026/01/23 12:0 a.m.5 views

PT-2026-4552

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 3.0 affected versions not specified Description Several public API endpoints disclose email addresses and non-public records, such as questions marked as invisible. The OpenQuestionController::list function calls...

5.3CVSS5.5AI score0.00021EPSS
Exploits1References5
Packet Storm News
Packet Storm News
added 2025/06/21 12:0 a.m.3 views

Navigating the Growing Field of Research on AI for Software Testing

In industry, software testing is the primary method to verify and validate the functionality, performance, security, usability, and so on, of software-based systems. Test automation has gained increasing attention in industry over the last decade, following decades of intense research into test...

6.9AI score
Exploits0
NVD
NVD
added 2018/08/28 5:29 p.m.15 views

CVE-2014-6046

Multiple cross-site request forgery CSRF vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecified users for requests that 1 delete active users by leveraging improper validation of CSRF tokens or that 2 delete open questions, 3 activate users, 4...

8.8CVSS9.1AI score0.00237EPSS
Exploits0References2
Cvelist
Cvelist
added 2018/08/28 5:0 p.m.20 views

CVE-2014-6046

Multiple cross-site request forgery CSRF vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecified users for requests that 1 delete active users by leveraging improper validation of CSRF tokens or that 2 delete open questions, 3 activate users, 4...

9.2AI score0.00237EPSS
Exploits0References2
Rows per page
Query Builder