关键信息 漏洞概述 漏洞名称: phpMyFAQ: /api/setup/backup accessible to any authenticated user (authz missing) 严重性: Moderate (6.5/10) CVE ID: CVE-2026-24421 受影响和已修复版本 受影响版本: 4.0.16 已修复版本: 4.0.17 问题描述 authenticated non-admin users can call /api/setup/backup and trigger a configuration backup. The endpoint checks only for authentication, but not authorization, and returns a link to the generated ZIP. PoC (Proof of Concept) 前提条件: API is active; an un-n Privilege non-admin user. - Log in as a non-admin user. - Call backup endpoint. 操作步骤: 影响 低权限用户能够生成敏感备份文件。如果ZIP文件通过网络访问（服务器配置错误），可能导致机密数据泄露。