CyberRota Analysis
AI-GeneratedphpMyFAQ versions prior to 4.1.6 are vulnerable due to the insecure handling of backup ZIP archives, which are stored in the web-accessible document root, allowing exposure of sensitive files such as database credentials. Unauthenticated attackers can exploit this vulnerability by racing concurrent requests to download the backup file before it is deleted, or by leveraging XSS in admin contexts to trigger and access the backup. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access to sensitive information.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database credentials. Unauthenticated attackers can race concurrent requests to download the temporary ZIP file before deletion, or exploit XSS in admin contexts to trigger authenticated backups and retrieve the archive.
Related CVEs
Other vulnerabilities affecting the same vendor(s)