CVE-2024-28107 phpMyFAQ SQL injections at insertentry & saveentry

What is CVE-2024-28107?

CVE-2024-28107 is a high-severity SQL injection vulnerability in Phpmyfaq Phpmyfaq, published on 25 Mar 2024. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. A SQL injection vulnerability has been discovered in the `insertentry` & `saveentry` when modifying records due to improper escaping of the email address. This allows any authenticated user with the rights to add/edit FAQ news to exploit this vulnerability to exfiltrate data, take over accounts and in some cases, even achieve RCE. This vulnerability is fixed in 3.2.6.

Weakness: CWE-89

Which versions are affected by CVE-2024-28107?

2 open source packages ship an affected version, including phpmyfaq/phpmyfaq. It affects 1 product.

Products include Phpmyfaq Phpmyfaq.

How do I fix CVE-2024-28107?

Upgrade phpmyfaq/phpmyfaq to 3.2.6 or later.

Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.

Is CVE-2024-28107 being exploited?

There is no known exploitation of CVE-2024-28107 in the wild and no public exploit code.

Other vulnerabilities in Phpmyfaq Phpmyfaq

• CVE-2023-0310 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq Critical 9.8
• CVE-2022-4407 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq Critical 9.8
• CVE-2017-11187 Security feature bypass in n/a Critical 9.8
• CVE-2026-76213 phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle Critical 9.1
• CVE-2026-76214 phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge Critical 9.1

All Phpmyfaq Phpmyfaq vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-2grw-mc9r-822r.