Approved changes feed: RSS · Atom
cpe:2.3:a:thorsten:phpmyfaq:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Thorsten (a5893c55-bfe7-51cb-a8b3-04468d69e68d) |
|---|---|
| Product | Phpmyfaq (c1ba3019-1f82-537f-9c04-fedec2fc2a83) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-111906 |
vulnerable | 2026-11-03 10:16:11.628420 |
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta CSRF in Elasticsearch/OpenSearch Admin API Index Operations
MEDIUM (6.5)
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch and OpenSearch administration API endpoints, which do not validate a CSRF token for the create, drop, and import actions. Attackers can lure a user with CONFIGURATION_EDIT permission to a malicious page that triggers these actions, deleting search indexes, forcing re-indexing, or exhausting resources.
Published: 2026-10-17T18:46:25.460Z
Updated: 2026-10-19T14:52:20.126Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111893 |
vulnerable | 2026-11-03 10:16:11.610530 |
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions API
MEDIUM (6.5)
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupController::saveCategoryRestrictions() that lets delegated administrators assign categories outside their own scope. Category-restricted administrators can POST to /admin/api/group/category-restrictions with out-of-scope or empty categoryIds to grant groups unrestricted category access.
Published: 2026-10-17T18:46:17.171Z
Updated: 2026-10-18T11:20:40.712Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111902 |
vulnerable | 2026-11-03 10:16:11.590372 |
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass via Comments and Attachments API
MEDIUM (5.3)
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in isFaqAccessibleForUser() that treats a missing FAQ translation as visible to unauthenticated users. Attackers can send a mismatched Accept-Language header to the comments and attachments API endpoints to read comments and attachment listings of unpublished or ACL-restricted FAQs.
Published: 2026-10-17T18:46:22.764Z
Updated: 2026-10-19T16:39:57.712Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111897 |
vulnerable | 2026-11-03 10:16:11.454704 |
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass in Attachment Administration Endpoints
HIGH (7.1)
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted editors to manage attachments of FAQs outside their categories by supplying arbitrary record IDs. Attackers in medium permission mode can send upload or delete requests with a target record_id or attachment ID to tamper with or remove files on unauthorized FAQs.
Published: 2026-10-17T18:46:19.963Z
Updated: 2026-10-19T21:29:59.961Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111887 |
vulnerable | 2026-11-03 10:16:11.295844 |
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Account Enumeration via Guest Comment Endpoint
MEDIUM (5.3)
phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration vulnerability that allows unauthenticated attackers to confirm registered display names and emails via a distinct HTTP 409 response. Attackers can submit guest comments to the comment create endpoint with candidate user and mail values to link names to emails for targeted phishing.
Published: 2026-10-17T18:46:12.494Z
Updated: 2026-10-18T13:26:01.243Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111882 |
vulnerable | 2026-11-03 10:16:11.203583 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111886 |
vulnerable | 2026-11-03 10:16:11.149853 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111907 |
vulnerable | 2026-11-03 10:16:11.100221 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111892 |
vulnerable | 2026-11-03 10:16:11.073577 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111903 |
vulnerable | 2026-11-03 10:16:11.062671 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111896 |
vulnerable | 2026-11-03 10:16:11.036394 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111898 |
vulnerable | 2026-11-03 10:16:10.991377 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111911 |
vulnerable | 2026-11-03 10:16:10.915826 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111884 |
vulnerable | 2026-11-03 10:16:10.879841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111909 |
vulnerable | 2026-11-03 10:16:10.877436 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111888 |
vulnerable | 2026-11-03 10:16:10.838942 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111905 |
vulnerable | 2026-11-03 10:16:10.834059 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111890 |
vulnerable | 2026-11-03 10:16:10.800586 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111901 |
vulnerable | 2026-11-03 10:16:10.778158 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111894 |
vulnerable | 2026-11-03 10:16:10.728478 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111889 |
vulnerable | 2026-11-03 10:16:10.700777 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111904 |
vulnerable | 2026-11-03 10:16:10.695543 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111891 |
vulnerable | 2026-11-03 10:16:10.668255 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111900 |
vulnerable | 2026-11-03 10:16:10.646167 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111895 |
vulnerable | 2026-11-03 10:16:10.616596 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111910 |
vulnerable | 2026-11-03 10:16:10.534516 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111885 |
vulnerable | 2026-11-03 10:16:10.482377 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111908 |
vulnerable | 2026-11-03 10:16:10.443496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116182 |
vulnerable | 2026-11-03 10:15:21.610115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116183 |
vulnerable | 2026-11-03 10:15:21.291303 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-85593 |
vulnerable | 2026-09-16 04:33:08.258653 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-85588 |
vulnerable | 2026-09-16 04:33:08.100747 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49205 |
vulnerable | 2026-07-29 00:57:45.277068 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48488 |
vulnerable | 2026-07-29 00:55:01.349389 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46367 |
vulnerable | 2026-06-08 08:05:12.051735 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46366 |
vulnerable | 2026-06-08 08:05:12.051502 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46365 |
vulnerable | 2026-06-08 08:05:12.051138 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46364 |
vulnerable | 2026-06-08 08:05:12.048775 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46363 |
vulnerable | 2026-06-08 08:05:12.048437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46362 |
vulnerable | 2026-06-08 08:05:12.048049 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46361 |
vulnerable | 2026-06-08 08:05:12.047828 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46360 |
vulnerable | 2026-06-08 08:05:12.047482 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-46359 |
vulnerable | 2026-06-08 08:05:12.047220 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45010 |
vulnerable | 2026-06-08 08:05:11.416792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45009 |
vulnerable | 2026-06-08 08:05:11.416420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45008 |
vulnerable | 2026-06-08 08:05:11.416047 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-45007 |
vulnerable | 2026-06-08 08:05:11.415689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35676 |
vulnerable | 2026-06-08 07:59:14.215367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35675 |
vulnerable | 2026-06-08 07:59:14.215125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35672 |
vulnerable | 2026-06-08 07:59:14.214159 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35671 |
vulnerable | 2026-06-08 07:59:14.213898 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34974 |
vulnerable | 2026-06-08 07:59:13.384038 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34973 |
vulnerable | 2026-06-08 07:59:13.382645 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34729 |
vulnerable | 2026-06-08 07:59:13.049575 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34728 |
vulnerable | 2026-06-08 07:59:13.048405 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32629 |
vulnerable | 2026-06-08 07:57:17.773214 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27836 |
vulnerable | 2026-06-08 07:55:14.039987 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24422 |
vulnerable | 2026-06-08 07:51:17.659775 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24421 |
vulnerable | 2026-06-08 07:51:17.659348 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24420 |
vulnerable | 2026-06-08 07:51:17.658280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-69200 |
vulnerable | 2026-06-08 07:41:22.175157 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68951 |
vulnerable | 2026-06-08 07:41:21.970821 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62519 |
vulnerable | 2026-06-08 07:37:29.883989 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59943 |
vulnerable | 2026-06-08 07:35:23.500979 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56199 |
vulnerable | 2026-06-08 06:54:17.529999 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-55889 |
vulnerable | 2026-06-08 06:54:17.208223 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-54141 |
vulnerable | 2026-06-08 06:54:16.107212 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29196 |
vulnerable | 2026-06-08 06:33:28.951605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-29179 |
vulnerable | 2026-06-08 06:33:28.914602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28108 |
vulnerable | 2026-06-08 06:33:26.477628 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28107 |
vulnerable | 2026-06-08 06:33:26.477220 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28106 |
vulnerable | 2026-06-08 06:33:26.476839 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28105 |
vulnerable | 2026-06-08 06:33:26.475445 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27300 |
vulnerable | 2026-06-08 06:31:28.458236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27299 |
vulnerable | 2026-06-08 06:31:28.456706 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24574 |
vulnerable | 2026-06-08 06:29:41.504928 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22208 |
vulnerable | 2026-06-08 06:29:34.129250 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22202 |
vulnerable | 2026-06-08 06:29:34.118199 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5320 |
vulnerable | 2026-06-08 06:19:43.161749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.