Unscored severity · published Sep 24, 2005
CVE-2005-3049
PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain sensitive…
–
CVSS
2.6%
EPSS
No
On KEV
Description
PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain sensitive information via a direct request to the data/tracking[DATE] file.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Phpmyfaq · Phpmyfaq
1.5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3049
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3049
marc.info
http://marc.info/?l=bugtraq&m=112749230124091&w=2
Exploit
http://rgod.altervista.org/phpmyfuck151.html
secunia.com
http://secunia.com/advisories/16933
securitytracker.com
http://securitytracker.com/id?1014968
www.osvdb.org
http://www.osvdb.org/19670
www.securityfocus.com
http://www.securityfocus.com/bid/14930
More from Phpmyfaq
9.8
CVE-2025-59943
phpMyFAQ duplicate email registration allows multiple accounts with the same email
9.8
CVE-2023-5865
Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2
9.8
CVE-2023-5227
Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8
9.8
CVE-2023-4006
Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to 3.1.16
9.8
CVE-2023-2429
Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.13