logo

Database

Server side template injection In thorsten/phpmyfaq

Description

Command Injection in thorsten/phpmyfaq Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2023-07892. NVD-2023-07893. OSV-2023-07894. GCVE-2023-0789

References

1. https://github.com/thorsten/phpmyfaq/commit/40515c74815ace394ab23c6c19cbb33fd49059cb2. https://huntr.com/bounties/d9375178-2f23-4f5d-88bd-bba3d6ba7cc5

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.