phpMyFAQ versions prior to 4.1.7 allow a SQL injection attack when creating or updating glossary entries because an escaped string is truncated before being incorporated into a SQL statement. The vulnerability arises when a user supplies a backslash that terminates the quoting sequence, enabling the execution of arbitrary SQL commands. The flaw permits the attacker to read confidential data stored in the database, thereby compromising the confidentiality of all stored information.

The affected product is phpMyFAQ developed by thorsten. All releases before 4.1.7 are vulnerable, including the latest pre‑4.1.7 builds. No specific sub‑versions are listed beyond the general threshold.

The vulnerability requires that the attacker be an authenticated user with permissions to add or edit glossary entries, so privileged accounts can be leveraged. It is an injection flaw classified as CWE‑89. The CVSS score of 8.6 indicates high severity, but the EPSS score is 0.0023 (< 1%), indicating a very low but non‑zero exploitation probability. The vulnerability is not present in the CISA KEV catalog, suggesting no known public exploits yet, but the potential for privilege abuse and data leakage is substantial.