CVE-2026-56737: Improper Authentication

phpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentication bypass in its public two-factor authentication verification flow: an unauthenticated attacker can submit an account’s numeric user ID and a valid or brute-forced six-digit TOTP code without firs...

CVE-2026-47132: Improper Input Validation

phpMyFAQ is an open source FAQ web application. Prior to version 4.2.0-alpha, an authenticated SQL LIKE wildcard injection vulnerability in phpMyFAQ’s chat user search allows any logged-in user to bypass the intended display-name search filter and enumerate active users. The endpoint escapes SQL...

CVE-2026-56736: Improper Neutralization of Input During Web Page Generation

phpMyFAQ is an open source FAQ web application. A stored cross-site scripting XSS vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user or low-privileged registered user to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a...

CVE-2026-56738: Improper Neutralization of Special Elements used in an SQL Command

phpMyFAQ is an open source FAQ web application. The StopWords::add method inversions prior to 4.1.6 builds a SQL INSERT statement using sprintf and inserts the user-supplied stop word value directly into the query string without calling the application's database escaping function on it. A siblin...

PT-2026-97855

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 3.2.0 through 4.1.5 Description An authentication bypass exists in the public two-factor authentication 2FA verification flow. An unauthenticated attacker can take over any account that has 2FA enabled, including administrato...

PT-2026-97827

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.2.0-alpha Description A stored cross-site scripting XSS issue exists that allows unauthenticated users or low-privileged registered users to inject arbitrary JavaScript. The attack occurs when an administrator...

PT-2026-98142

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.6 Description An issue exists in the StopWords::add function where user-supplied input is inserted into a SQL INSERT statement using sprintf without proper database escaping. This occurs specifically in the code...

The vulnerability of the isAddingQuestionsAllowed() function in the phpMyFAQ web application allows a hacker to bypass existing security mechanisms.

The vulnerability of the isAddingQuestionsAllowed function in the phpMyFAQ web application is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to bypass existing security measures remotely...

The vulnerability of the html_entity_decode() function in the phpMyFAQ web application allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the htmlentitydecode function in the phpMyFAQ web application is related to the lack of protective measures for the website’s structure. Exploiting this vulnerability could allow an attacker to execute arbitrary JavaScript code remotely...

The vulnerability of the phpMyFAQ web application lies in the insufficient control over the frequency of interactions, allowing attackers to bypass existing security mechanisms.

The vulnerability of the phpMyFAQ web application is related to insufficient control over the frequency of interactions. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

The vulnerability of the phpMyFAQ web application, related to deficiencies in the authentication process, allows attackers to gain unauthorized access to protected information.

The vulnerability of the phpMyFAQ web application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the updateData() function in the phpMyFAQ web application allows a hacker to gain unauthorized access to protected information.

The vulnerability of the updateData function in the phpMyFAQ web application is related to the lack of necessary checks during password changes. Exploiting this vulnerability could allow an attacker who operates remotely to gain unauthorized access to protected information...

The vulnerability of the removeTwofactorConfig() function in the phpMyFAQ web application, which allows a hacker to bypass existing security measures

The vulnerability of the removeTwofactorConfig function in the phpMyFAQ web application is related to the lack of authentication for the critical function. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...

Incorrect Authorization

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Incorrect Authorization due to insufficient permission checks on admin content pages. An attacker can access unpublished content by leveraging add...

Incorrect Authorization

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Incorrect Authorization due to insufficient permission checks on admin content pages. An attacker can access unpublished content by leveraging add...

Improper Control of Interaction Frequency

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Improper Control of Interaction Frequency via the store parameter in question submission requests. An attacker can submit unlimited questions without...

Improper Control of Interaction Frequency

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Improper Control of Interaction Frequency via the store parameter in question submission requests. An attacker can submit unlimited questions without...

Information Exposure

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Information Exposure via the data export process. An attacker can obtain TOTP shared secrets in plaintext by accessing exported user data ZIP archives,...

Information Exposure

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Information Exposure via the data export process. An attacker can obtain TOTP shared secrets in plaintext by accessing exported user data ZIP archives,...

Unverified Password Change

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Unverified Password Change via the user control panel API endpoint. An attacker can gain unauthorized access to user accounts by submitting a crafted PU...