Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
phpMyFAQ is an open source FAQ web application. In versions prior to 4.0.16, an unauthenticated remote attacker can trigger generation of a configuration backup ZIP via `POST /api/setup/backup` and then download the generated ZIP from a web-accessible location. The ZIP contains sensitive configuration files (e.g., `database.php` with database credentials), leading to high-impact information disclosure and potential follow-on compromise. Version 4.0.16 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-02-10 | 1 | Patch1 |
| 2026-02-11 | 2 | General2 |
CVE-2025-69200 - phpMyFAQ vulnerability https://dy.si/umxK8 https://t.co/iEk90ropoc
Post summary
The tweet references CVE-2025-69200 affecting phpMyFAQ and includes two URLs, but provides no additional technical or exploitation details.
#ThreatProtection #CVE-2025-69200 - #phpMyFAQ #vulnerability, read more about Symantec's protection: https://www.broadcom.com/support/security-center/protection-bulletin/cve-2025-69200-phpmyfaq-vulnerability
Post summary
The tweet directs readers to a Symantec protection bulletin for CVE‑2025‑69200 in phpMyFAQ, indicating a vendor patch or mitigation is available, but provides no PoC or exploitation details.
CVE-2025-69200 - phpMyFAQ vulnerability https://dy.si/MDzH7s https://t.co/BDZuUju2P5
Post summary
The tweet merely announces CVE-2025-69200 as a phpMyFAQ vulnerability, linking to external URLs, but provides no further technical or operational details.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | phpmyfaq | phpmyfaq | - | - | - |
| App | phpmyfaq | phpmyfaq | 4.1.0 | - | - |