Home
Home
Grey Skin Blue Skin Green Skin Red Skin

Advisories archive

Searching 24550 links categorized as php vuln/adviso since 2003-04-07

24550 results found, please narrow your search...

phpMyAdmin 4.9.0.1 Cross Site Request Forgery
WordPress Plugin Photo Gallery 1.5.34 SQL Injection
WordPress Checklist 1.1.5 Cross Site Scripting
WordPress Qwiz Online Quizzes And Flashcards 3.36 Cross Site Scripting
WordPress Sell Downloads 1.0.86 Cross Site Scripting
Reality | Estate Multipurpose WordPress Theme Persistent XSS
WordPress Plugin UserPro 4.9.32 Cross-Site Scripting
WordPress 5.2.3 Remote Cross Site Host Modification
Nexos - Real Estate WordPress Theme SQL Injection & Persistent XSS
Wordpress Plugin Event Tickets 4.10.7.1 CSV Injection
WordPress API Bearer Auth 20181229 Cross Site Scripting
WordPress Ecpay Logistics For WooCommerce 1.2.181030 Cross Site Scripting
Multiple Code Execution Flaws Found In PHP Programming Language
WordPress Portrait-Archiv.com Photostore 5.0.4 Cross Site Scripting
WordPress Spryng Payments WooCommerce 1.6.7 Cross Site Scripting
WordPress Event Tickets 4.10.7.1 CSV Injection
YouPHPTube 7.4 Remote Code Execution
Wordpress Gallery Objects Version 0.4 SQL Injection vulnerability
X-Cart DesignHouse MonarchDigitalMedia MagicAngel SQL Injection
Joomla 1.5.26 Com_OrgChart Components 1.0.0 XSS SQL Injection
Joomla 1.5.26 Com_FireBoard Components 1.1.3 SQL Injection
Mambo Miro International Infoerbe XSS SQL Injection
vBulletin Reflected XSS via "Click here"
Joomla 1.5.26 Com_AlphaContent Components 3.x SQL Injection
Joomla 1.5.26 Com_EstateAgent Components 3.x SQL Injection
MediaWiki 1.27.4 content sniffing Vulnerability
phpPgAdmin-5.1 file enumeration && XSS
MediaWiki OAuth2 Client 0.3 Cross Site Request Forgery
How Activity Logs Help WordPress Admins Better Manage Website Security
Joomla JS Jobs 1.2.5 SQL Injection
osTicket 1.12 Formula Injection
osTicket 1.12 File Upload Cross Site Scripting
osTicket 1.12 Cross Site Scripting
Joomla JS Support Ticket 1.1.5 Arbitrary File Download
Joomla! Component JS Support Ticket (component com_jssupportticket) 1.1.5 SQL Injection
WordPress JoomSport 3.3 SQL Injection
ATutor 2.2.4 Arbitrary File Upload / Command Execution
Active PHP Bookmarks 1.3 SQL Injection
ibrowser phpthumb Command Injection
Yahei-PHP Prober 0.4.7 HTML Injection
Ovidentia 8.4.3 SQL Injection
Real Estate 7 - Real Estate WordPress Theme v2.8.9 Persistent XSS Injection
WordPress OneSignal 1.17.5 Cross Site Scripting
WordPress Plugin OneSignal 1.17.5 subdomain Persistent Cross-Site Scripting
phpFK 8.0 version Reinstall Add Admin Vulnerability
PHP Laravel Framework Token Unserialize Remote Command Execution
Nagios XI 5.5.6 Magpie_debug.php Root Remote Code Execution (Metasploit)
phpFK lite-version Cross Site Scripting
WordPress Like Button 1.6.0 Authentication Bypass
Magento 2.3.1: Unauthenticated Stored XSS to RCE
SquirrelMail 1.4.22 Cross Site Scripting
Nagios XI Magpie_debug.php Root Remote Code Execution
dotCMS 5.1.5: Exploiting H2 SQL injection to RCE
iLive - Intelligent WordPress Live Chat Support Plugin v1.0.4 Stored XSS Injection
SeedDMS out.GroupMgr.php Cross Site Scripting
dotProject 2.1.9 SQL Injection
WordPress Plugin Insert or Embed Articulate Content into WordPress Remote Code Execution (Unautorized)
WordPress Plugin Insert or Embed Articulate Content into WordPress Remote Code Execution
WordPress - ChurcHope Responsive Themes 4.7.x Directory Traversal Vulnerability
Wordpress Plugins Simple-e-commerce-shopping-cart DatabaseSQL Backup Disclosure Vulnerability
Wordpress Plugins Cart66-Lite DatabaseSQL Backup Disclosure Vulnerability
DigaSell - Digital store PHP Script V1.0.0 XSS Vulnerability
WebLord WL-Nuke Coppermine for PHP-Nuke v1.3.1c SQL Injection
phpMyAdmin 4.8 Cross Site Request Forgery
WordPress Plugin Insert or Embed Articulate Content into WordPress - Remote Code Execution (UPLOAD SHELL)
MyBB <= 1.8.20: From Stored XSS to RCE
PHP Security Advent Calendar 2018
New Flaw in WordPress Live Chat Plugin Lets Hackers Steal and Hijack Sessions
WordPress 5.2.1 Antena_Ri Institute Themes 2.0 Open Redirection
WordPress Satoshi 2.0 Cross Site Request Forgery / File Upload
WordPress Plugin Form Maker 1.13.3 SQL Injection
Shopware createInstanceFromNamedArguments PHP Object Instantiation Remote Code Execution
Hackers Infect 50,000 MS-SQL and PHPMyAdmin Servers with Rootkit Malware
WordPress 4.9.10 Xunjin Themes 4.6 Open Redirection
WordPress 4.8.9 Tigin Themes 1.0.5 Open Redirection
WordPress 5.2.1 Divi-Child Themes 1.0 Open Redirection
WordPress 5.1.1 jilijilibegin Themes LTS 4.6 Open Redirection
WordPress 4.9.x Jingke Themes 1.0 Open Redirection
Joomla 3.9.6 Com_Attachments Components 3.x Unauthorized File Insertion
WordPress 4.9.10 4DMayi Themes 4.6 Open Redirection
WordPress 5.2.1 DingTalk Themes LTS 4.6 Open Redirection
WordPress 4.9.8 LaneMotorSport Responsive Themes 1.8.4 Open Redirection
WordPress 4.6.14 lqcPlugin-regiePublicites Plugins 1.0 Open Redirection
WordPress 4.6.12 PHPL Plugins 1.0 Open Redirection
WordPress 5.2.1 Dankov Planer Themes 1.1.2 Open Redirection
WordPress 4.9.10 Aliyun Themes 5.2 Open Redirection
WordPress 4.4.18 Ad-Manager Plugins 1.1.2 Open Redirection
Shopware createInstanceFromNamedArguments PHP Object Instantiation
PHP PHP_INI_SYSTEM Ineffective Controls
phpKF 1.10 XSS / CSRF / SQL Injection
Xoops Wordpress Modules WP-Ktai 0.5.0 Japan Open Redirection
Horde Webmail - XSS + CSRF to SQLi, RCE, Stealing Emails < = v5.2.22
Vuln: Drupal Novalnet Payment Module- Ubercart Module SQL Injection Vulnerability
PHP-Fusion 9.03.00 Remote Code Execution
XOOPS CMS 2.5.9 SQL Injection
WordPress Form Maker 1.13.3 SQL Injection
(Wordpress) Ninja Forms File Uploads Extension < = 3.0.22 – Unauthenticated Arbitrary File Upload
WordPress Diarise 1.5.9 Local File Disclosure
Wordpress - W3 Total Cache - SSRF / RCE
Wordpress Social Warfare Remote Code Execution
French English Russian