Vulnerabilidades en thorsten
176 resultadosCVE-2026-45010CRITICALphpMyFAQ - Unauthenticated Two-Factor Authentication Brute-Force via /admin/check EndpointEPSS 0.4%CVE-2024-56199MEDIUMphpMyFAQ Vulnerable to Stored HTML Injection at FAQEPSS 0.4%CVE-2026-76205HIGHphpMyFAQ before 4.1.7 SQL Injection via GlossaryEPSS 0.4%CVE-2026-76212MEDIUMphpMyFAQ before 4.1.7 LIKE Wildcard Injection via PostgreSQLEPSS 0.4%CVE-2026-76210HIGHphpMyFAQ before v4.1.6 Local File Disclosure via PDF ExportEPSS 0.4%CVE-2023-0313MEDIUMCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.4%CVE-2026-35675HIGHphpMyFAQ - Authentication Bypass via Missing Password Reset Token in /api/user/password/updateEPSS 0.4%CVE-2025-59943HIGHphpMyFAQ duplicate email registration allows multiple accounts with the same emailEPSS 0.4%CVE-2026-111901HIGHphpMyFAQ 4.2.0-alpha before 4.2.0-beta Unauthenticated DoS via API PaginationEPSS 0.4%CVE-2026-111905HIGHphpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta IDOR Leaks TOTP Secret via /admin/api/user/dataEPSS 0.4%CVE-2026-66398CRITICALphpMyFAQ before 4.1.6 Remote Code Execution via Configuration APIEPSS 0.4%CVE-2026-24422MEDIUMphpMyFAQ: Public API endpoints expose emails and invisible questionsEPSS 0.4%CVE-2026-66397HIGHphpMyFAQ before 4.1.6 Path Traversal via category image deletionEPSS 0.4%CVE-2026-76214CRITICALphpMyFAQ before 4.1.7 WebAuthn Replay Attack via ChallengeEPSS 0.4%CVE-2023-5317MEDIUMCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.4%CVE-2026-111882HIGHphpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta TOTP 2FA Bypass via SSO CallbacksEPSS 0.4%CVE-2026-49205MEDIUMphpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix)EPSS 0.4%CVE-2026-35671HIGHphpMyFAQ - Insecure Direct Object Reference in User Password APIEPSS 0.4%CVE-2026-111895HIGHphpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta Account Takeover via Entra ID preferred_usernameEPSS 0.4%CVE-2026-111908HIGHphpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta BOLA in FAQ Update via REST APIEPSS 0.4%