Information Disclosure

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request.CVE-2014-6048Phpmyfaq · 5.7% likely

   CWE-200

2. phpMyFAQ 2.6.13 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrat…CVE-2011-3783Phpmyfaq · 1.2% likely

   CWE-200

3. phpMyFAQ - Information Disclosure of Inactive FAQ Content via Public API EndpointsCVE-2026-57994phpMyFAQ · CVSS 5.3 · 0.4% likely

   CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.