CVE-2014-6049: Phpmyfaq

Low severity, CVSS 2.7. EPSS: 3.2% chance of exploitation in the next 30 days.

phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted instance ID parameter.

Affected products

• Phpmyfaq Phpmyfaq: before 2.8.13 (fixed in 2.8.13)

Published 2018-08-28. Last modified 2026-06-17.