CVE-2005-0702: Phpmyfaq

Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages.

Affected products

• Phpmyfaq Phpmyfaq: version 1.4 only; version 1.4_alpha1 only; version 1.4_alpha2 only; version 1.4a only; version 1.5 only

Published 2005-03-07. Last modified 2026-06-16.