CVE-2004-2255: Phpmyfaq

Medium severity, CVSS 6.4. EPSS: 2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used as part of a template filename.

Affected products

• Phpmyfaq Phpmyfaq: version 1.3.12 only

Published 2004-12-31. Last modified 2026-06-16.