Threats Tagged 'cve-2026-34728'
View all threats tagged with 'cve-2026-34728'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-34728'
Click on any threat for detailed analysis and mitigation recommendations
0 A path traversal vulnerability (CWE-22) exists in phpMyFAQ versions prior to 4.1.1 in the MediaBrowserController::index() method. The vulnerability arises because the user-supplied filename parameter is concatenated with the base upload directory path without proper validation, allowing directory traversal sequences like .. / to bypass restrictions. The input sanitization only encodes HTML special characters and does not prevent traversal sequences. Additionally, the endpoint lacks CSRF token validation, making it susceptible to CSRF attacks. This vulnerability has been patched in version 4.1.1. Join the discussion | CVE Database V5 | 04/02/2026, 14:44:19 UTC Added: 04/02/2026, 15:08:28 UTC |
Showing 1 to 1 of 1 result