https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 18:44:28 +0000 https://cve.radiocsirt.org/vuln/cve-2026-45008 <p><strong>Affected:</strong> thorsten phpmyfaq</p> <p>phpMyFAQ before 4.1.2 contains a path traversal vulnerability in Client::deleteClientFolder that allows admins with INSTANCE_DELETE permission to delete arbitrary directories. Attackers can submit traversal sequences like https://../../../&lt;path&gt; in the client URL parameter to recursively delete directories outside the intended clientFolder scope.</p> <p><strong>Affected:</strong> thorsten phpmyfaq</p> <p>phpMyFAQ before 4.1.2 contains a path traversal vulnerability in Client::deleteClientFolder that allows admins with INSTANCE_DELETE permission to delete arbitrary directories. Attackers can submit traversal sequences like https://../../../&lt;path&gt; in the client URL parameter to recursively delete directories outside the intended clientFolder scope.</p> https://cve.radiocsirt.org/vuln/cve-2026-45008