CVE-2026-48488
Vulnerability Description
phpMyFAQ is an open source FAQ web application. Prior to version 4.1.4, attachment passwords are hashed using SHA-1, a cryptographically broken algorithm. SHA-1 has been vulnerable to collision attacks since 2017 (SHAttered). Version 4.1.4 fixes the issue.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-328
Source
NVD
Vendor
thorsten
Product
phpMyFAQ
Discussion (0)
Add Comment
No comments yet. Be the first!