CVE-2024-54141

CVSS V2 None CVSS V3 None

Description

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Prior to 4.0.0, phpMyFAQ exposes the database (ie postgreSQL) server's credential when connection to DB fails. This vulnerability is fixed in 4.0.0.

Overview

CVE ID
CVE-2024-54141

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-12-06T15:00:16.407Z

Last Modified Date
2024-12-06T17:12:03.413Z

Weakness Enumerations

CWE	URL
CWE-209	http://cwe.mitre.org/data/definitions/209.html

References

Reference URL	Reference Tags
https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-vrjr-p3xp-xx2x	x_refsource_CONFIRM
https://github.com/thorsten/phpMyFAQ/commit/b9289a0b2233df864361c131cd177b6715fbb0fe	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-54141
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54141

History

Created	Old Value	New Value	Data Type	Notes
2024-12-07 13:09:08				Added to TrackCVE