CVE-2026-76205: phpMyFAQ before 4.1.7 SQL Injection via Glossary
phpMyFAQ before 4.1.7 contains a SQL injection vulnerability in the glossary create and update endpoints caused by truncating an escaped string before embedding it in a SQL literal. Authenticated users with glossary add or edit permissions can craft a payload with a dangling backslash to escape the closing quote and inject arbitrary SQL commands to read sensitive database information.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
phpMyFAQto a version that resolves this vulnerability.Fixed in 4.1.7 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SQL Injection via Glossary
Event History
Frequently Asked Questions
Which users can exploit this issue?
An attacker must be authenticated and have permission to add or edit glossary entries. Unauthenticated users are not described as able to exploit the vulnerable endpoints.
What access does successful exploitation provide?
A successful attacker can inject arbitrary SQL commands and read sensitive information from the database. The provided information does not indicate an impact on availability.
How can I determine whether an installation is affected?
Installations running phpMyFAQ before version 4.1.7 are affected. The vulnerable functionality is the glossary create and update endpoints.