https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T02:37:46.683289+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-75214 EUVD-2026-75214 2026-10-24T02:37:46.686133+00:00 EUVD-2026-75214 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29196 fkie_cve-2024-29196 2026-10-24T02:37:46.686177+00:00

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. There is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root. This vulnerability is fixed in 3.2.6.

 https://cve.radiocsirt.org/vuln/ghsa-mmh6-5cpf-2c72 GHSA-mmh6-5cpf-2c72 — phpMyFAQ Path Traversal in Attachments 2026-10-24T02:37:46.686216+00:00

Affected: Packagist: phpmyfaq/phpmyfaq

### Summary There is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root.

### PoC 1. In settings, the attachment location is vulnerable to path traversal and can be set to e.g ..\hacked ![image](https://github.com/thorsten/phpMyFAQ/assets/63487456/6167ba74-254c-4aed-9c16-759e5ceafd81)

2. When the above is set, attachments files are now uploaded to e.g C:\Apps\XAMPP\htdocs\hacked instead of C:\Apps\XAMPP\htdocs\phpmyfaq\attachments

3. Verify this by uploading an attachment and see that the "hacked" directory is now created in the web root folder with the attachment file inside. ![image](https://github.com/thorsten/phpMyFAQ/assets/63487456/325df0cc-e9ee-48bd-a7bb-1295199b4d9e) ![image](https://github.com/thorsten/phpMyFAQ/assets/63487456/beb10a6a-9d56-4607-8da6-49581991b1fe)

### Impact Attackers can potentially upload malicious files outside the specified directory.

 https://cve.radiocsirt.org/vuln/gsd-2024-29196 gsd-2024-29196 2026-10-24T02:37:46.686251+00:00 gsd-2024-29196