Vulnerability Database

314,496

Total vulnerabilities in the database

CVE-2010-4558

phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification (Trojan Horse) in the getTopTen method in inc/Faq.php, which allows remote attackers to execute arbitrary PHP code.

Published: Dec 17, 2010
Updated: Nov 9, 2025
CVE: CVE-2010-4558
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-94

Affected Software
References

Software	From	Fixed in
phpmyfaq / phpmyfaq	2.6.11	2.6.11.x
phpmyfaq / phpmyfaq	2.6.12	2.6.12.x

http://secunia.com/advisories/42622
http://www.phpmyfaq.de/advisory_2010-12-15.php
http://www.securityfocus.com/bid/45442
http://www.vupen.com/english/advisories/2010/3254

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo