CVE-2024-22208

phpMyFAQ is an Open Source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The 'sharing FAQ' functionality allows any unauthenticated actor to misuse the phpMyFAQ application to send arbitrary emails to a large range of targets. The phpMyFAQ application has a functionality where anyone can share a FAQ item to others. The front-end of this functionality allows any phpMyFAQ articles to be shared with 5 email addresses. Any unauthenticated actor can perform this action. There is a CAPTCHA in place, however the amount of people you email with a single request is not limited to 5 by the backend. An attacker can thus solve a single CAPTCHA and send thousands of emails at once. An attacker can utilize the target application's email server to send phishing messages. This can get the server on a blacklist, causing all emails to end up in spam. It can also lead to reputation damages. This issue has been patched in version 3.2.5.

• CWE-863

• https://github.com/thorsten/phpMyFAQ/commit/a34d94ab7b1be9256a9ef898f18ea6bfb63f6f1ePatch
• https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-9hhf-xmcw-r3xgExploit, Vendor Advisory
• https://github.com/thorsten/phpMyFAQ/commit/a34d94ab7b1be9256a9ef898f18ea6bfb63f6f1ePatch
• https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-9hhf-xmcw-r3xgExploit, Vendor Advisory

Published

Feb 5, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-22202phpMyFAQ is an open source FAQ web application for PHP 8.1+ …6.5
• CVE-2024-22203Whoogle Search is a self-hosted metasearch engine. In versio…9.8
• CVE-2024-22204Whoogle Search is a self-hosted metasearch engine. Versions …5.3
• CVE-2024-22205Whoogle Search is a self-hosted metasearch engine. In versio…9.8
• CVE-2024-22206Clerk helps developers build user management. Unauthorized a…9.8
• CVE-2024-22207fastify-swagger-ui is a Fastify plugin for serving Swagger U…5.3
• CVE-2024-22209Open edX Platform is a service-oriented platform for authori…8.8
• CVE-2024-2221qdrant/qdrant is vulnerable to a path traversal and arbitrar…9.8
• CVE-2024-22211FreeRDP is a set of free and open source remote desktop prot…9.8
• CVE-2024-22212Nextcloud Global Site Selector is a tool which allows you to…9.8
• CVE-2024-22213Deck is a kanban style organization tool aimed at personal p…5.4
• CVE-2024-22216In default installations of Microchip maxView Storage Manage…10