CVE-2026-66397

8.6 Élevée

Publiée le 27/07/2026 à 18:18 · Modifiée le 28/07/2026 à 22:37 · Analyse NVD reportée · Source : disclosure@vulncheck.com

Description

phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existing_image field during category updates, allowing authenticated attackers to delete arbitrary files by exploiting insufficient sanitization in Image::delete(). Attackers can delete the database.php configuration file to disable the installation gate and access the public setup wizard to create new superadmin accounts.

Traduire en français

Produits concernés

thorsten phpMyFAQ

Scores CVSS

Version	Score	Source	Vecteur
4.0	8.6 Élevée	disclosure@vulncheck.com	`CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`

Faiblesses (CWE)

CWE-22

Références

https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-mh9w-5hr8-3272
https://www.vulncheck.com/advisories/phpmyfaq-before-path-traversal-via-category-image-deletion
https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-mh9w-5hr8-3272

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories