CVE-2014-6048: Phpmyfaq

Medium severity, CVSS 5.3. EPSS: 5.7% chance of exploitation in the next 30 days.

phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request.

Affected products

• Phpmyfaq Phpmyfaq: before 2.8.13 (fixed in 2.8.13)

Published 2018-08-28. Last modified 2026-06-17.