CVE-2014-6045: Phpmyfaq

High severity, CVSS 7.2. EPSS: 2.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the restore function.

Affected products

• Phpmyfaq Phpmyfaq: before 2.8.13 (fixed in 2.8.13)

Published 2018-08-28. Last modified 2026-06-17.