https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 02:37:46 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-75214 EUVD-2026-75214 https://cve.radiocsirt.org/vuln/euvd-2026-75214 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29196 <p>phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. There is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root. This vulnerability is fixed in 3.2.6.</p> <p>phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. There is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root. This vulnerability is fixed in 3.2.6.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-29196 https://cve.radiocsirt.org/vuln/ghsa-mmh6-5cpf-2c72 <p><strong>Affected:</strong> Packagist: phpmyfaq/phpmyfaq</p> <p>### Summary There is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root.</p> <p>### PoC 1. In settings, the attachment location is vulnerable to path traversal and can be set to e.g ..\hacked </p> <p>2. When the above is set, attachments files are now uploaded to e.g C:\Apps\XAMPP\htdocs\hacked instead of C:\Apps\XAMPP\htdocs\phpmyfaq\attachments</p> <p>3. Verify this by uploading an attachment and see that the &#34;hacked&#34; directory is now created in the web root folder with the attachment file inside.  </p> <p>### Impact Attackers can potentially upload malicious files outside the specified directory.</p> <p><strong>Affected:</strong> Packagist: phpmyfaq/phpmyfaq</p> <p>### Summary There is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root.</p> <p>### PoC 1. In settings, the attachment location is vulnerable to path traversal and can be set to e.g ..\hacked </p> <p>2. When the above is set, attachments files are now uploaded to e.g C:\Apps\XAMPP\htdocs\hacked instead of C:\Apps\XAMPP\htdocs\phpmyfaq\attachments</p> <p>3. Verify this by uploading an attachment and see that the &#34;hacked&#34; directory is now created in the web root folder with the attachment file inside.  </p> <p>### Impact Attackers can potentially upload malicious files outside the specified directory.</p> https://cve.radiocsirt.org/vuln/ghsa-mmh6-5cpf-2c72 https://cve.radiocsirt.org/vuln/gsd-2024-29196 gsd-2024-29196 https://cve.radiocsirt.org/vuln/gsd-2024-29196