PT-2025-53730 · Phpmyfaq · Phpmyfaq

Eclipse07077-Ljw · Published 2025-12-29 · Updated 2026-02-10 · CVE-2025-69200

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.0.16

Description An unauthenticated remote attacker can trigger the generation of a configuration backup ZIP file via the /api/setup/backup API endpoint. The generated ZIP file, accessible via the web, contains sensitive configuration files such as database.php which includes database credentials. This leads to information disclosure and potential compromise. The vulnerable parameter is not specified.

Recommendations Update to version 4.0.16 or later.

Exploit

Fix

Weakness Enumeration

CWE-202

Related Identifiers

CVE-2025-69200

GHSA-9CG9-4H4F-J6FG

Affected Products

Phpmyfaq

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69200.json · Exploit
• https://github.com/thorsten/phpMyFAQ/commit/b0e99ee3695152115841cb546d8dce64ceb8c29a · Patch
• https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-9cg9-4h4f-j6fg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69200 · Security Note
• https://osv.dev/vulnerability/CVE-2025-69200 · Vendor Advisory
• https://t.me/CVEtracker/40839 · Telegram Post
• https://twitter.com/threatintel/status/2021250138493108411 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2005688142200725519 · Twitter Post
• https://twitter.com/pdnuclei_bot/status/2009958437367767392 · Twitter Post