CVE-2024-54141

7.5 highEPSS 0.5%

High (7.5) in phpmyfaq phpmyfaq. EPSS 0.5% chance of exploitation in the next 30 days.

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Prior to 4.0.0, phpMyFAQ exposes the database (ie postgreSQL) server's credential when connection to DB fails. This vulnerability is fixed in 4.0.0.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-209
Published: 2024-12-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phpmyfaq:phpmyfaq

References

https://github.com/thorsten/phpMyFAQ/commit/b9289a0b2233df864361c131cd177b6715fbb0fe
https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-vrjr-p3xp-xx2x

Check your stack JSON