Home
Home
Grey Skin Blue Skin Green Skin Red Skin

Advisories archive

Searching 24490 links categorized as php vuln/adviso since 2003-04-07

24490 results found, please narrow your search...

Wordpress Plugins Cart66-Lite DatabaseSQL Backup Disclosure Vulnerability
DigaSell - Digital store PHP Script V1.0.0 XSS Vulnerability
WebLord WL-Nuke Coppermine for PHP-Nuke v1.3.1c SQL Injection
phpMyAdmin 4.8 Cross Site Request Forgery
WordPress Plugin Insert or Embed Articulate Content into WordPress - Remote Code Execution (UPLOAD SHELL)
MyBB <= 1.8.20: From Stored XSS to RCE
PHP Security Advent Calendar 2018
New Flaw in WordPress Live Chat Plugin Lets Hackers Steal and Hijack Sessions
WordPress 5.2.1 Antena_Ri Institute Themes 2.0 Open Redirection
WordPress Satoshi 2.0 Cross Site Request Forgery / File Upload
WordPress Plugin Form Maker 1.13.3 SQL Injection
Shopware createInstanceFromNamedArguments PHP Object Instantiation Remote Code Execution
Hackers Infect 50,000 MS-SQL and PHPMyAdmin Servers with Rootkit Malware
WordPress 4.9.10 Xunjin Themes 4.6 Open Redirection
WordPress 4.8.9 Tigin Themes 1.0.5 Open Redirection
WordPress 5.2.1 Divi-Child Themes 1.0 Open Redirection
WordPress 5.1.1 jilijilibegin Themes LTS 4.6 Open Redirection
WordPress 4.9.x Jingke Themes 1.0 Open Redirection
Joomla 3.9.6 Com_Attachments Components 3.x Unauthorized File Insertion
WordPress 4.9.10 4DMayi Themes 4.6 Open Redirection
WordPress 5.2.1 DingTalk Themes LTS 4.6 Open Redirection
WordPress 4.9.8 LaneMotorSport Responsive Themes 1.8.4 Open Redirection
WordPress 4.6.14 lqcPlugin-regiePublicites Plugins 1.0 Open Redirection
WordPress 4.6.12 PHPL Plugins 1.0 Open Redirection
WordPress 5.2.1 Dankov Planer Themes 1.1.2 Open Redirection
WordPress 4.9.10 Aliyun Themes 5.2 Open Redirection
WordPress 4.4.18 Ad-Manager Plugins 1.1.2 Open Redirection
Shopware createInstanceFromNamedArguments PHP Object Instantiation
PHP PHP_INI_SYSTEM Ineffective Controls
phpKF 1.10 XSS / CSRF / SQL Injection
Xoops Wordpress Modules WP-Ktai 0.5.0 Japan Open Redirection
Horde Webmail - XSS + CSRF to SQLi, RCE, Stealing Emails < = v5.2.22
Vuln: Drupal Novalnet Payment Module- Ubercart Module SQL Injection Vulnerability
PHP-Fusion 9.03.00 Remote Code Execution
XOOPS CMS 2.5.9 SQL Injection
WordPress Form Maker 1.13.3 SQL Injection
(Wordpress) Ninja Forms File Uploads Extension < = 3.0.22 – Unauthenticated Arbitrary File Upload
WordPress Diarise 1.5.9 Local File Disclosure
Wordpress - W3 Total Cache - SSRF / RCE
Wordpress Social Warfare Remote Code Execution
phpBB 3.2.5 Denial Of Service
Traveler - Travel Booking WordPress Theme v2.7 Reflected XSS Injection
Joomla! Component JiFile 2.3.1 - Arbitrary File Download
clientResponse Responsive PHP Client Management Stored XSS Injection
Joomla! Component ARI Quiz 3.7.4 - SQL Injection
Joomla! Component com_cwreserveer - SQL Injection
osTicket 1.11 Cross Site Scripting / Local File Inclusion
Critical Unpatched Flaw Disclosed in WordPress WooCommerce Extension
Hackers Actively Exploiting Widely-Used Social Share Plugin for WordPress
JobCareer | Job Board Responsive WordPress Theme v2.5 Stored XSS Injection
Warkers PHP Search Script WebShell Upload
Joomla Core 1.5.0 3.9.4 Directory Traversal / Authenticated Arbitrary File Deletion
Shadow-Fox PhP Uploader Script Cross Site Scripting Vulnerability
WordPress Download Manager 2.9.93 Cross Site Scripting
Drupal Releases Core CMS Updates to Patch Several Vulnerabilities
Tasked PHP Task Management Multiple Stored XSS Injection
OpenDocMan 1.3.4 - Multiple XSS Injection
phpRechnung 1.6.6 - Multiple XSS Injection
BackUpWordPress 3.8 Plugins Backup Path Disclosure Vulnerability
ATutor file_manager Remote Code Execution
WordPress Plugin Contact Form Maker 1.13.1 Cross-Site Request Forgery
Horde Form Shell Upload
Wordpress Markant theme Arbitrary file Download
PHP 7.2 imagecolormatch() Out of Band Heap Write
YiiCMS JetBrains PHPStorm 6.0.3 Database Disclosure
Vuln: WordPress Wordfence Plugin Unspecified Cross Site Scripting Vulnerability
WordPress Limit Login Attempts Reloaded 2.7.4 Bypass
Joomla omponent iPhone homepage icon 2.0.0 Parameter SQL Injection
WordPress Menu Plugin - Mega Main Menu unauthorized backup
WordPress 5.0.0 Crop-image Shell Upload (Metasploit)
WordPress Plugin PayPal Checkout Payment Gateway 1.6.8 Parameter Tampering
WordPress 5.0.0 crop-image Shell Upload
Vuln: Drupal Core SA-CORE-2019-004 Cross Site Scripting Vulnerability
WordPress iOS App Bug Leaked Secret Access Tokens to Third-Party Sites
phpFileManager 1.7.8 Local File Inclusion
CMS Made Simple SQL Injection
WordPress - Nishizawa_Tmp Themes Directory Traversal Vulnerability
WordPress 4.9.x U_Parts Themes Directory Traversal Vulnerability
WordPress Oxygen-Theme Directory Traversal Vulnerability
Critical Magento SQL Injection Vulnerability Discovered – Patch Your Sites
Magento 2.3.0 SQL Injection
WordPress 4.9.10 ButterKekse Plugins Open Redirection
Magento 2.2.0 <= 2.3.0 Unauthenticated SQLi
WordPress 4.9.2 WordPress-Feed-Statistics Plugins 4.1 Open Redirection
MyBB Upcoming Events Plugin 1.32 - Cross-Site Scripting
WordPress 4.6.1 WireFunnel Plugins Open Redirection
WordPress 4.8 Ait-ThemesClub TemplatePreview 1.8.1 RFI Open Redirection
WordPress Ultimate Form Builder Plugins 1.0 Database Disclosure
WordPress 5.1.1 WPBounce AND-AntiBounce Plugins 1.0.3 Open Redirection
WordPress 2.0.2 WP-Forum Plugins 1.7.8 Database Disclosure
Wordpress 5.0.4 begin Themes Open Redirection
Spip CMS 2.x/3.x Add Administrator Account & Insert File Vulnerability
WordPress 3.4.2 The-CL-Amazon-Thingy Plugins 1.0 Open Redirection
WordPress Easy WP SMTP plugin 0-day
WordPress 5.0.4 Age-Verification Plugins 0.5 Open Redirection
WordPress 4.9.8 KingAbdullahPort KAP Themes Database Configuration File Download
WordPress 4.9.x U_Parts Themes Database Configuration File Download
WordPress 4.7.13 ChurcHope Responsive Themes 4.7.x Database Configuration File Download
WordPress 4.2.2 Oxygen-Theme Themes Database Configuration File Download
WordPress 4.x CafeSalivation Themes Database Configuration File Download
French English Russian