GCVE - cpe:2.3:a:phpmyfaq:phpmyfaq:1.4

Approved changes feed: RSS · Atom

cpe:2.3:a:phpmyfaq:phpmyfaq:1.4_alpha1:*:*:*:*:*:*:*

part: a version: 1.4_alpha1 update: *

Vendor	Phpmyfaq (`36d5951f-3344-59d3-87f2-c1fb92487bb6`)
Product	Phpmyfaq (`6f356a4b-5559-5157-b7be-8fda97b04dcf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:composer/phpmyfaq/phpmyfaq`	purl2cpe	2026-06-01 10:12:06.497955
`pkg:docker/phpmyfaq/phpmyfaq`	purl2cpe	2026-06-01 10:12:06.497956
`pkg:github/thorsten/phpmyfaq`	purl2cpe	2026-06-01 10:12:06.497958
`pkg:rpm/opensuse/phpmyfaq`	purl2cpe	2026-06-01 10:12:06.497959

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-4040`	vulnerable	2026-06-08 04:51:46.651997	Details available Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page. Published: 2009-11-20T19:00:00.000Z Updated: 2024-09-16T16:23:01.897Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/3241 http://secunia.com/advisories/37354 http://www.phpmyfaq.de/advisory_2009-09-01.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0702`	vulnerable	2026-06-08 04:48:13.366654	Details available SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages. Published: 2005-03-09T05:00:00.000Z Updated: 2024-08-07T21:21:06.462Z Open on db.gcve.eu Reference links http://secunia.com/advisories/14516 http://www.phpmyfaq.de/advisory_2005-03-06.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2256`	not_vulnerable	2026-06-08 04:48:09.022824	Details available Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly execute local PHP files, via .. sequences in the lang (language) variable. Published: 2005-07-17T04:00:00.000Z Updated: 2024-08-08T01:22:13.405Z Open on db.gcve.eu Reference links http://www.phpmyfaq.de/advisory_2004-05-18.php http://securitytracker.com/id?1010190 http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html http://www.securityfocus.com/archive/1/363636 http://secunia.com/advisories/11640	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Phpmyfaq

Notes

PURL mappings

Vulnerability references

Contribute