High
phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available
Type: advisorySources: OSV
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Prior to 4.0.0, phpMyFAQ exposes the database (ie postgreSQL) server's credential when connection to DB fails. This vulnerability is fixed in 4.0.0.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2024-54141
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 10:46 UTC · Revision 1
Source evidence
phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available
core-osv · Original sourcePublished 6 Dec 2024, 15:00 UTC
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Prior to 4.0.0, phpMyFAQ exposes the database (ie postgreSQL) server's credential when connection to DB fails. This vulnerability is fixed in 4.0.0.
osv:CVE-2024-54141
Complete source record
{
"id": "b1a39fca2301e36702a939bc062729cddf32308673ccba5adcbf2c859d0a97c2",
"url": "https://osv.dev/vulnerability/CVE-2024-54141",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available",
"summary": "phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Prior to 4.0.0, phpMyFAQ exposes the database (ie postgreSQL) server's credential when connection to DB fails. This vulnerability is fixed in 4.0.0.",
"evidence": "osv:CVE-2024-54141",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2024-54141",
"aliases": [
"CVE-2024-54141",
"GHSA-vrjr-p3xp-xx2x"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/thorsten/phpmyfaq",
"type": "GIT",
"events": [
{
"introduced": "1edda28c3dd34a919263827aaedbb957b099fbbc"
},
{
"fixed": "b9289a0b2233df864361c131cd177b6715fbb0fe"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:phpmyfaq:phpmyfaq:4.0.0:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.0-alpha"
},
{
"last_affected": "4.0.0-alpha"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "b9289a0b2233df864361c131cd177b6715fbb0fe"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"4.0.0-alpha",
"4.0.0-RC.5",
"4.0.0-RC.4",
"4.0.0-RC.3",
"development-nightly-2024-10-27",
"development-nightly-2024-10-26",
"development-nightly-2024-10-25",
"development-nightly-2024-10-24",
"4.0.0-RC.2",
"development-nightly-2024-10-23",
"development-nightly-2024-10-22",
"development-nightly-2024-10-21",
"development-nightly-2024-10-20",
"development-nightly-2024-10-19",
"development-nightly-2024-10-18",
"development-nightly-2024-10-17",
"development-nightly-2024-10-16",
"development-nightly-2024-10-15",
"4.0.0-RC",
"development-nightly-2024-10-14",
"development-nightly-2024-10-13",
"development-nightly-2024-10-12",
"development-nightly-2024-10-11",
"development-nightly-2024-10-10",
"development-nightly-2024-10-09",
"development-nightly-2024-10-08",
"development-nightly-2024-10-07",
"development-nightly-2024-10-06",
"development-nightly-2024-10-05",
"development-nightly-2024-10-04",
"development-nightly-2024-10-03",
"development-nightly-2024-10-02",
"development-nightly-2024-10-01",
"development-nightly-2024-09-30",
"development-nightly-2024-09-29",
"development-nightly-2024-09-28",
"development-nightly-2024-09-27",
"development-nightly-2024-09-26",
"development-nightly-2024-09-25",
"development-nightly-2024-09-24",
"development-nightly-2024-09-23",
"4.0.0-beta.2",
"development-nightly-2024-09-22",
"development-nightly-2024-09-21",
"development-nightly-2024-09-20",
"development-nightly-2024-09-19",
"development-nightly-2024-09-18",
"development-nightly-2024-09-17",
"development-nightly-2024-09-16",
"development-nightly-2024-09-15",
"development-nightly-2024-09-14",
"development-nightly-2024-09-13",
"development-nightly-2024-09-12",
"development-nightly-2024-09-11",
"development-nightly-2024-09-10",
"development-nightly-2024-09-09",
"development-nightly-2024-09-08",
"development-nightly-2024-09-07",
"development-nightly-2024-09-06",
"development-nightly-2024-09-05",
"development-nightly-2024-09-04",
"development-nightly-2024-09-03",
"development-nightly-2024-09-02",
"4.0.0-beta",
"development-nightly-2024-09-01",
"development-nightly-2024-08-31",
"development-nightly-2024-08-30",
"development-nightly-2024-08-29",
"development-nightly-2024-08-28",
"development-nightly-2024-08-27",
"development-nightly-2024-08-26",
"development-nightly-2024-08-25",
"development-nightly-2024-08-24",
"development-nightly-2024-08-23",
"development-nightly-2024-08-22",
"development-nightly-2024-08-21",
"development-nightly-2024-08-20",
"development-nightly-2024-08-19",
"development-nightly-2024-08-18",
"development-nightly-2024-08-17",
"development-nightly-2024-08-16",
"development-nightly-2024-08-15",
"development-nightly-2024-08-14",
"development-nightly-2024-08-13",
"development-nightly-2024-08-12",
"development-nightly-2024-08-11",
"development-nightly-2024-08-10",
"development-nightly-2024-08-09",
"development-nightly-2024-08-08",
"development-nightly-2024-08-07",
"development-nightly-2024-08-06",
"development-nightly-2024-08-05",
"development-nightly-2024-08-04",
"development-nightly-2024-08-03",
"development-nightly-2024-08-02",
"development-nightly-2024-08-01",
"development-nightly-2024-07-31",
"development-nightly-2024-07-30",
"development-nightly-2024-07-29",
"development-nightly-2024-07-28",
"development-nightly-2024-07-27",
"development-nightly-2024-07-26",
"development-nightly-2024-07-25",
"development-nightly-2024-07-24",
"4.0.0-alpha.4",
"development-nightly-2024-07-23",
"development-nightly-2024-07-22",
"4.0.0-alpha.3",
"development-nightly-2024-07-21",
"development-nightly-2024-07-20",
"development-nightly-2024-07-19",
"development-nightly-2024-07-18",
"development-nightly-2024-07-17",
"development-nightly-2024-07-16",
"development-nightly-2024-07-15",
"development-nightly-2024-07-14",
"development-nightly-2024-07-13",
"development-nightly-2024-07-12",
"development-nightly-2024-07-11",
"development-nightly-2024-07-10",
"development-nightly-2024-07-09",
"development-nightly-2024-07-08",
"development-nightly-2024-07-07",
"development-nightly-2024-07-06",
"development-nightly-2024-07-05",
"development-nightly-2024-07-04",
"development-nightly-2024-07-03",
"development-nightly-2024-07-02",
"development-nightly-2024-07-01",
"development-nightly-2024-06-30",
"development-nightly-2024-06-29",
"development-nightly-2024-06-28",
"development-nightly-2024-06-27",
"development-nightly-2024-06-26",
"development-nightly-2024-06-25",
"development-nightly-2024-06-24",
"development-nightly-2024-06-23",
"development-nightly-2024-06-22",
"development-nightly-2024-06-21",
"development-nightly-2024-06-20",
"development-nightly-2024-06-19",
"development-nightly-2024-06-18",
"development-nightly-2024-06-17",
"development-nightly-2024-06-16",
"development-nightly-2024-06-15",
"development-nightly-2024-06-14",
"development-nightly-2024-06-13",
"development-nightly-2024-06-12",
"development-nightly-2024-06-11",
"development-nightly-2024-06-10",
"development-nightly-2024-06-09",
"development-nightly-2024-06-08",
"development-nightly-2024-06-07",
"development-nightly-2024-06-06",
"development-nightly-2024-06-05",
"development-nightly-2024-06-04",
"development-nightly-2024-06-03",
"development-nightly-2024-06-02",
"4.0.0-alpha.2",
"development-nightly-2024-06-01",
"development-nightly-2024-05-31",
"development-nightly-2024-05-30",
"development-nightly-2024-05-29",
"development-nightly-2024-05-28",
"development-nightly-2024-05-27",
"development-nightly-2024-05-26",
"development-nightly-2024-05-25",
"development-nightly-2024-05-24",
"development-nightly-2024-05-23",
"development-nightly-2024-05-22",
"development-nightly-2024-05-21",
"development-nightly-2024-05-20",
"development-nightly-2024-05-19",
"development-nightly-2024-05-18",
"development-nightly-2024-05-17",
"development-nightly-2024-05-16",
"development-nightly-2024-05-15",
"development-nightly-2024-05-14",
"development-nightly-2024-05-13",
"development-nightly-2024-05-12",
"development-nightly-2024-05-11",
"development-nightly-2024-05-10",
"development-nightly-2024-05-09",
"development-nightly-2024-05-08",
"development-nightly-2024-05-07",
"development-nightly-2024-05-06",
"development-nightly-2024-05-05",
"development-nightly-2024-05-04",
"development-nightly-2024-05-03",
"development-nightly-2024-05-02",
"development-nightly-2024-05-01",
"development-nightly-2024-04-30",
"development-nightly-2024-04-29",
"development-nightly-2024-04-28",
"development-nightly-2024-04-27",
"development-nightly-2024-04-26",
"development-nightly-2024-04-25",
"development-nightly-2024-04-24",
"development-nightly-2024-04-23",
"development-nightly-2024-04-22",
"development-nightly-2024-04-21",
"development-nightly-2024-04-20",
"development-nightly-2024-04-19",
"development-nightly-2024-04-18",
"development-nightly-2024-04-17",
"development-nightly-2024-04-16",
"development-nightly-2024-04-15",
"development-nightly-2024-04-14",
"development-nightly-2024-04-13",
"development-nightly-2024-04-12",
"development-nightly-2024-04-11",
"development-nightly-2024-04-10",
"development-nightly-2024-04-09",
"development-nightly-2024-04-08",
"development-nightly-2024-04-07",
"development-nightly-2024-04-06",
"development-nightly-2024-04-05",
"development-nightly-2024-04-04",
"development-nightly-2024-04-03",
"development-nightly-2024-04-02",
"development-nightly-2024-04-01",
"development-nightly-2024-03-31",
"development-nightly-2024-03-30",
"development-nightly-2024-03-29",
"development-nightly-2024-03-28",
"development-nightly-2024-03-27",
"development-nightly-2024-03-26",
"development-nightly-2024-03-25",
"development-nightly-2024-03-24",
"development-nightly-2024-03-23",
"development-nightly-2024-03-22",
"development-nightly-2024-03-21",
"development-nightly-2024-03-20",
"development-nightly-2024-03-19",
"development-nightly-2024-03-18",
"development-nightly-2024-03-17",
"development-nightly-2024-03-16",
"development-nightly-2024-03-15",
"development-nightly-2024-03-14",
"development-nightly-2024-03-13",
"development-nightly-2024-03-12",
"development-nightly-2024-03-11",
"development-nightly-2024-03-10",
"development-nightly-2024-03-09",
"development-nightly-2024-03-08",
"development-nightly-2024-03-07",
"development-nightly-2024-03-06",
"development-nightly-2024-03-05",
"development-nightly-2024-03-04",
"development-nightly-2024-03-03",
"development-nightly-2024-03-02",
"development-nightly-2024-03-01",
"development-nightly-2024-02-29",
"development-nightly-2024-02-28",
"development-nightly-2024-02-27",
"development-nightly-2024-02-26",
"development-nightly-2024-02-25",
"development-nightly-2024-02-24",
"development-nightly-2024-02-23",
"development-nightly-2024-02-22",
"development-nightly-2024-02-21",
"development-nightly-2024-02-20",
"development-nightly-2024-02-19",
"development-nightly-2024-02-18",
"development-nightly-2024-02-17",
"development-nightly-2024-02-16",
"development-nightly-2024-02-15",
"development-nightly-2024-02-14",
"development-nightly-2024-02-13",
"development-nightly-2024-02-12"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-54141.json"
}
}
],
"modified": "2026-10-28T02:30:28.010857520Z",
"provider": "osv",
"references": [
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/54xxx/CVE-2024-54141.json",
"https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-vrjr-p3xp-xx2x",
"https://nvd.nist.gov/vuln/detail/CVE-2024-54141",
"https://github.com/thorsten/phpMyFAQ/commit/b9289a0b2233df864361c131cd177b6715fbb0fe"
],
"provider_metadata": {
"cwe_ids": [
"CWE-209"
],
"cna_assigner": "GitHub_M",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/54xxx/CVE-2024-54141.json"
}
},
"related_cves": [
{
"value": "CVE-2024-54141",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 494640,
"published_at": "2024-12-06T15:00:16.407+00:00"
}