CVE-2024-54141

Published Dec 6, 2024

Last updated 3 months ago

Overview

Description: phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Prior to 4.0.0, phpMyFAQ exposes the database (ie postgreSQL) server's credential when connection to DB fails. This vulnerability is fixed in 4.0.0.
Source: security-advisories@github.com
NVD status: Received

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8.6
Impact score: 4.7
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Severity: HIGH

Weaknesses

security-advisories@github.com: CWE-209

Hype score: Not currently trending

CVE-2024-54141 phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Prior to 4.0.0, phpMyFAQ exposes the database (ie postgreSQL) s… https://t.co/9MkDiJIvnH
@CVEnew
6 Dec 2024
291 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

References