Skip to content
Threat Feed
Subscribe

Product

PhpMyFAQ (< 4.2.0-Alpha)

1 brief RSS
high advisory

SQL Injection in phpMyFAQ StopWords::add()

An authenticated administrator can exploit an unescaped SQL insertion vulnerability in the phpMyFAQ StopWords::add() method (CVE-2026-56738) to execute arbitrary database commands.

phpMyFAQ +2 cve-2026-56737 authentication-bypass web-security
2r 3t 1c