Skip to content
Threat Feed
Subscribe

Product

PhpMyFAQ (3.2.0 - 4.1.5)

1 brief RSS
high advisory

SQL Injection in phpMyFAQ StopWords::add()

An authenticated administrator can exploit an unescaped SQL insertion vulnerability in the phpMyFAQ StopWords::add() method (CVE-2026-56738) to execute arbitrary database commands.

phpMyFAQ +2 cve-2026-56737 authentication-bypass web-security
2r 3t 1c