Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-3t82-87ka-k3ea
Vulnerability ID VCID-3t82-87ka-k3ea
Aliases CVE-2023-0793
GHSA-fxrq-xhj9-rf5j
Summary Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-521 Weak Password Requirements
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00246 https://api.first.org/data/v1/epss?cve=CVE-2023-0793
epss 0.00246 https://api.first.org/data/v1/epss?cve=CVE-2023-0793
epss 0.00246 https://api.first.org/data/v1/epss?cve=CVE-2023-0793
epss 0.00246 https://api.first.org/data/v1/epss?cve=CVE-2023-0793
epss 0.00246 https://api.first.org/data/v1/epss?cve=CVE-2023-0793
epss 0.00246 https://api.first.org/data/v1/epss?cve=CVE-2023-0793
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-fxrq-xhj9-rf5j
cvssv3.1 8.8 https://github.com/thorsten/phpMyFAQ
generic_textual HIGH https://github.com/thorsten/phpMyFAQ
cvssv3.1 7.1 https://github.com/thorsten/phpmyfaq/commit/00c04093c671607ee06cdfd670070809460f9547
cvssv3.1 8.8 https://github.com/thorsten/phpmyfaq/commit/00c04093c671607ee06cdfd670070809460f9547
generic_textual HIGH https://github.com/thorsten/phpmyfaq/commit/00c04093c671607ee06cdfd670070809460f9547
ssvc Track https://github.com/thorsten/phpmyfaq/commit/00c04093c671607ee06cdfd670070809460f9547
cvssv3.1 7.1 https://huntr.dev/bounties/b3881a1f-2f1e-45cb-86f3-735f66e660e9
cvssv3.1 8.8 https://huntr.dev/bounties/b3881a1f-2f1e-45cb-86f3-735f66e660e9
generic_textual HIGH https://huntr.dev/bounties/b3881a1f-2f1e-45cb-86f3-735f66e660e9
ssvc Track https://huntr.dev/bounties/b3881a1f-2f1e-45cb-86f3-735f66e660e9
cvssv3.1 8.8 https://nvd.nist.gov/vuln/detail/CVE-2023-0793
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2023-0793
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-0793
https://github.com/thorsten/phpMyFAQ
https://github.com/thorsten/phpmyfaq/commit/00c04093c671607ee06cdfd670070809460f9547
https://huntr.dev/bounties/b3881a1f-2f1e-45cb-86f3-735f66e660e9
CVE-2023-0793 https://nvd.nist.gov/vuln/detail/CVE-2023-0793
GHSA-fxrq-xhj9-rf5j https://github.com/advisories/GHSA-fxrq-xhj9-rf5j
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/thorsten/phpMyFAQ
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N Found at https://github.com/thorsten/phpmyfaq/commit/00c04093c671607ee06cdfd670070809460f9547
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/thorsten/phpmyfaq/commit/00c04093c671607ee06cdfd670070809460f9547
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-21T18:46:24Z/ Found at https://github.com/thorsten/phpmyfaq/commit/00c04093c671607ee06cdfd670070809460f9547
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N Found at https://huntr.dev/bounties/b3881a1f-2f1e-45cb-86f3-735f66e660e9
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://huntr.dev/bounties/b3881a1f-2f1e-45cb-86f3-735f66e660e9
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-21T18:46:24Z/ Found at https://huntr.dev/bounties/b3881a1f-2f1e-45cb-86f3-735f66e660e9
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2023-0793
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.48095
EPSS Score 0.00246
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-02T04:43:59.836284+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-0793.yml 38.6.0