← All credits

Sultan0f1

4 vulnerability records and advisories credit this contributor.

CVE-2026-111908

phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta BOLA in FAQ Update via REST API

CVE-2026-111907

phpMyFAQ 4.0.0 before 4.1.9 CSRF via /admin/api/update-database

CVE-2026-111906

phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta CSRF in Elasticsearch/OpenSearch Admin API Index Operations

CVE-2026-111909

phpMyFAQ before 4.1.9 Missing Authorization Allows Superadmin Deletion via deleteUser API