Detections
Analytics

SCA: security update for phpmyfaq/phpmyfaq, thorsten/phpmyfaq (GHSA-rw77-vq4g-x3hp)

info Tenable Cloud Security Plugin ID 448365

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - phpMyFAQ is an open source FAQ web application. The `StopWords::add()` method inversions prior to 4.1.6
 builds a SQL `INSERT` statement using `sprintf()` and inserts the user-supplied stop word value directly
 into the query string without calling the application's database escaping function on it. A sibling
 method, `StopWords::update()`, which modifies an existing stop word, correctly escapes the same kind of
 input. The omission is isolated to the `add()` (insert) code path. An authenticated administrator who can
 reach the stop-word management feature can submit a crafted value as the "word" parameter that breaks out
 of the SQL string literal and injects arbitrary SQL, including statements to drop tables, exfiltrate data,
 or modify other rows in the database. Version 4.1.6 fixes the issue. (CVE-2026-56738)

See Also

https://github.com/advisories/GHSA-rw77-vq4g-x3hp

Plugin Details

Severity: Info

ID: 448365

Published: 9/25/2026

Updated: 9/25/2026

Reference Information

CVE: CVE-2026-56738

cwe: CWE-89