CVE-2010-4558: Phpmyfaq

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification (Trojan Horse) in the getTopTen method in inc/Faq.php, which allows remote attackers to execute arbitrary PHP code.

Affected products

• Phpmyfaq Phpmyfaq: version 2.6.11 only; version 2.6.12 only

Published 2010-12-17. Last modified 2026-06-16.