Home
Home
Grey Skin Blue Skin Green Skin Red Skin

Advisories archive

Searching 24521 links categorized as php vuln/adviso since 2003-04-07

24521 results found, please narrow your search...

Joomla JS Jobs 1.2.5 SQL Injection
osTicket 1.12 Formula Injection
osTicket 1.12 File Upload Cross Site Scripting
osTicket 1.12 Cross Site Scripting
Joomla JS Support Ticket 1.1.5 Arbitrary File Download
Joomla! Component JS Support Ticket (component com_jssupportticket) 1.1.5 SQL Injection
WordPress JoomSport 3.3 SQL Injection
ATutor 2.2.4 Arbitrary File Upload / Command Execution
Active PHP Bookmarks 1.3 SQL Injection
ibrowser phpthumb Command Injection
Yahei-PHP Prober 0.4.7 HTML Injection
Ovidentia 8.4.3 SQL Injection
Real Estate 7 - Real Estate WordPress Theme v2.8.9 Persistent XSS Injection
WordPress OneSignal 1.17.5 Cross Site Scripting
WordPress Plugin OneSignal 1.17.5 subdomain Persistent Cross-Site Scripting
phpFK 8.0 version Reinstall Add Admin Vulnerability
PHP Laravel Framework Token Unserialize Remote Command Execution
Nagios XI 5.5.6 Magpie_debug.php Root Remote Code Execution (Metasploit)
phpFK lite-version Cross Site Scripting
WordPress Like Button 1.6.0 Authentication Bypass
Magento 2.3.1: Unauthenticated Stored XSS to RCE
SquirrelMail 1.4.22 Cross Site Scripting
Nagios XI Magpie_debug.php Root Remote Code Execution
dotCMS 5.1.5: Exploiting H2 SQL injection to RCE
iLive - Intelligent WordPress Live Chat Support Plugin v1.0.4 Stored XSS Injection
SeedDMS out.GroupMgr.php Cross Site Scripting
dotProject 2.1.9 SQL Injection
WordPress Plugin Insert or Embed Articulate Content into WordPress Remote Code Execution (Unautorized)
WordPress Plugin Insert or Embed Articulate Content into WordPress Remote Code Execution
WordPress - ChurcHope Responsive Themes 4.7.x Directory Traversal Vulnerability
Wordpress Plugins Simple-e-commerce-shopping-cart DatabaseSQL Backup Disclosure Vulnerability
Wordpress Plugins Cart66-Lite DatabaseSQL Backup Disclosure Vulnerability
DigaSell - Digital store PHP Script V1.0.0 XSS Vulnerability
WebLord WL-Nuke Coppermine for PHP-Nuke v1.3.1c SQL Injection
phpMyAdmin 4.8 Cross Site Request Forgery
WordPress Plugin Insert or Embed Articulate Content into WordPress - Remote Code Execution (UPLOAD SHELL)
MyBB <= 1.8.20: From Stored XSS to RCE
PHP Security Advent Calendar 2018
New Flaw in WordPress Live Chat Plugin Lets Hackers Steal and Hijack Sessions
WordPress 5.2.1 Antena_Ri Institute Themes 2.0 Open Redirection
WordPress Satoshi 2.0 Cross Site Request Forgery / File Upload
WordPress Plugin Form Maker 1.13.3 SQL Injection
Shopware createInstanceFromNamedArguments PHP Object Instantiation Remote Code Execution
Hackers Infect 50,000 MS-SQL and PHPMyAdmin Servers with Rootkit Malware
WordPress 4.9.10 Xunjin Themes 4.6 Open Redirection
WordPress 4.8.9 Tigin Themes 1.0.5 Open Redirection
WordPress 5.2.1 Divi-Child Themes 1.0 Open Redirection
WordPress 5.1.1 jilijilibegin Themes LTS 4.6 Open Redirection
WordPress 4.9.x Jingke Themes 1.0 Open Redirection
Joomla 3.9.6 Com_Attachments Components 3.x Unauthorized File Insertion
WordPress 4.9.10 4DMayi Themes 4.6 Open Redirection
WordPress 5.2.1 DingTalk Themes LTS 4.6 Open Redirection
WordPress 4.9.8 LaneMotorSport Responsive Themes 1.8.4 Open Redirection
WordPress 4.6.14 lqcPlugin-regiePublicites Plugins 1.0 Open Redirection
WordPress 4.6.12 PHPL Plugins 1.0 Open Redirection
WordPress 5.2.1 Dankov Planer Themes 1.1.2 Open Redirection
WordPress 4.9.10 Aliyun Themes 5.2 Open Redirection
WordPress 4.4.18 Ad-Manager Plugins 1.1.2 Open Redirection
Shopware createInstanceFromNamedArguments PHP Object Instantiation
PHP PHP_INI_SYSTEM Ineffective Controls
phpKF 1.10 XSS / CSRF / SQL Injection
Xoops Wordpress Modules WP-Ktai 0.5.0 Japan Open Redirection
Horde Webmail - XSS + CSRF to SQLi, RCE, Stealing Emails < = v5.2.22
Vuln: Drupal Novalnet Payment Module- Ubercart Module SQL Injection Vulnerability
PHP-Fusion 9.03.00 Remote Code Execution
XOOPS CMS 2.5.9 SQL Injection
WordPress Form Maker 1.13.3 SQL Injection
(Wordpress) Ninja Forms File Uploads Extension < = 3.0.22 – Unauthenticated Arbitrary File Upload
WordPress Diarise 1.5.9 Local File Disclosure
Wordpress - W3 Total Cache - SSRF / RCE
Wordpress Social Warfare Remote Code Execution
phpBB 3.2.5 Denial Of Service
Traveler - Travel Booking WordPress Theme v2.7 Reflected XSS Injection
Joomla! Component JiFile 2.3.1 - Arbitrary File Download
clientResponse Responsive PHP Client Management Stored XSS Injection
Joomla! Component ARI Quiz 3.7.4 - SQL Injection
Joomla! Component com_cwreserveer - SQL Injection
osTicket 1.11 Cross Site Scripting / Local File Inclusion
Critical Unpatched Flaw Disclosed in WordPress WooCommerce Extension
Hackers Actively Exploiting Widely-Used Social Share Plugin for WordPress
JobCareer | Job Board Responsive WordPress Theme v2.5 Stored XSS Injection
Warkers PHP Search Script WebShell Upload
Joomla Core 1.5.0 3.9.4 Directory Traversal / Authenticated Arbitrary File Deletion
Shadow-Fox PhP Uploader Script Cross Site Scripting Vulnerability
WordPress Download Manager 2.9.93 Cross Site Scripting
Drupal Releases Core CMS Updates to Patch Several Vulnerabilities
Tasked PHP Task Management Multiple Stored XSS Injection
OpenDocMan 1.3.4 - Multiple XSS Injection
phpRechnung 1.6.6 - Multiple XSS Injection
BackUpWordPress 3.8 Plugins Backup Path Disclosure Vulnerability
ATutor file_manager Remote Code Execution
WordPress Plugin Contact Form Maker 1.13.1 Cross-Site Request Forgery
Horde Form Shell Upload
Wordpress Markant theme Arbitrary file Download
PHP 7.2 imagecolormatch() Out of Band Heap Write
YiiCMS JetBrains PHPStorm 6.0.3 Database Disclosure
Vuln: WordPress Wordfence Plugin Unspecified Cross Site Scripting Vulnerability
WordPress Limit Login Attempts Reloaded 2.7.4 Bypass
Joomla omponent iPhone homepage icon 2.0.0 Parameter SQL Injection
WordPress Menu Plugin - Mega Main Menu unauthorized backup
French English Russian