https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T00:19:59.080939+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111907 fkie_cve-2026-111907 2026-10-20T00:19:59.100583+00:00

phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/api/update-database endpoint, which executes database migrations without validating a CSRF token. Attackers can lure a logged-in user with the CONFIGURATION_EDIT permission into submitting a crafted cross-site request, triggering migrations that may impact database integrity or availability.

 https://db.gcve.eu/vuln/ghsa-mm6v-fm3q-x3xw GHSA-mm6v-fm3q-x3xw 2026-10-20T00:19:59.100672+00:00

phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/api/update-database endpoint, which executes database migrations without validating a CSRF token. Attackers can lure a logged-in user with the CONFIGURATION_EDIT permission into submitting a crafted cross-site request, triggering migrations that may impact database integrity or availability.