phpMyFAQ 4.0.7

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyfaq:phpmyfaq:4.0.7:*:*:*:*:*:*:*

part: a version: 4.0.7 update: *

VendorPhpmyfaq (36d5951f-3344-59d3-87f2-c1fb92487bb6)
ProductPhpmyfaq (6f356a4b-5559-5157-b7be-8fda97b04dcf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:composer/phpmyfaq/phpmyfaq purl2cpe 2026-06-01 10:12:06.543296
pkg:docker/phpmyfaq/phpmyfaq purl2cpe 2026-06-01 10:12:06.543297
pkg:github/thorsten/phpmyfaq purl2cpe 2026-06-01 10:12:06.543298
pkg:rpm/opensuse/phpmyfaq purl2cpe 2026-06-01 10:12:06.543300

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59943 vulnerable 2026-06-08 07:35:23.501867 phpMyFAQ duplicate email registration allows multiple accounts with the same email
HIGH (8.1)
phpMyFAQ is an open source FAQ web application. Versions 4.0-nightly-2025-10-03 and below do not enforce uniqueness of email addresses during user registration. This allows multiple distinct accounts to be created with the same email. Because email is often used as an identifier for password resets, notifications, and administrative actions, this flaw can cause account ambiguity and, in certain configurations, may lead to privilege escalation or account takeover. This issue is fixed in version 4.0.13.
Published: 2025-10-03T20:06:09.404Z
Updated: 2025-10-03T20:45:27.185Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.