Home
Home
Grey Skin Blue Skin Green Skin Red Skin

Advisories archive

Searching 25341 links categorized as php vuln/adviso since 2003-04-07

25341 results found, please narrow your search...

Best Quiz, Exam and Survey Plugin bis 7.1.17 auf WordPress Quiz Result Page result_id erweiterte Rechte
WordPress Plugin Database Backups 1.2.2.6 Database Backup Download CSRF
Elemin Themify Framework themify-ajax.php erweiterte Rechte
Symfony 5.3.0/5.3.1 schwache Authentisierung [CVE-2021-32693]
MantisBT bis 2.25.1 manage_custom_field_edit_page.php return Cross Site Scripting
BetterLinks Simple 301 Redirects Plugin bis 2.0.3 auf WordPress Nonce export_data erweiterte Rechte
Side Menu Add Fixed Side Buttons Plugin bis 3.1.4 auf WordPress GET Parameter did SQL Injection
Sendit WP Newsletter Plugin bis 2.5.1 auf WordPress lists-management Page id_lista SQL Injection
Xllentech English Islamic Calendar Plugin bis 2.6.7 auf WordPress year_number/month_number SQL Injection
Simple 301 Redirects Plugin bis 2.0.3 auf WordPress Nonce get_wildcard erweiterte Rechte
SP Project & Document Manager Plugin bis 4.21 auf WordPress File Extension erweiterte Rechte
Create Magento App 1.5.1/1.5.2 magento-scripts Denial of Service
WordPress wpDiscuz 7.0.4 Remote Code Execution
Ekattor Student Assignment php script-Stored XSS
WordPress Visitors-App 0.3 Cross Site Scripting
Wordpress Plugin wpDiscuz 7.0.4 - Arbitrary File Upload (Unauthenticated)
iFlyChat Plugin bis 4.6.4 auf WordPress APP ID Setting Cross Site Scripting
Easy Preloader Plugin bis 1.0.0 auf WordPress Cross Site Scripting
Adiscon LogAnalyzer 4.1.10/4.1.11 login.php Cross Site Scripting
Invoice Ninja bis 4.3.x AccountRepository.php erweiterte Rechte
Pbootcms 2.0.3 admin.php Cross Site Scripting
Cacti 1.2.12 SQL Injection / Remote Command Execution
FDCMS 4.0 Front-End FloginAction.class.php SQL Injection
PHP 8.1.0-dev User-Agentt Remote Code Execution expl
WordPress WP Prayer 1.6.1 Cross Site Scripting
WP Super Cache Plugin bis 1.7.2 auf WordPress Incomplete Fix CVE-2021-24209 erweiterte Rechte
External Media Plugin bis 1.0.33 auf WordPress AJAX Action erweiterte Rechte
CartFlows Create High Converting Sales Funnels Plugin bis 1.6.12 auf WordPress Settings facebook_pixel_id/google_analytics_id Cross Site Scripting
pfSense 2.4.5-p1 load_balancer_monitor.php Cross Site Scripting
Hackers‌ ‌Actively‌ ‌Exploiting‌ ‌0-Day‌ ‌in WordPress Plugin Installed on Over ‌17,000‌ ‌Sites
CMS Made Simple 2.2.14 Setting News Module Cross Site Scripting
IPS Community Suite 4.5.4.2 PHP Code Injection
VoIPmonitor bis 24.60 Configuration config/configuration.php SPOOLDIR erweiterte Rechte
WordPress LifterLMS 4.21.0 Cross Site Scripting
PHPFusion 9.03.50 Remote Code Execution
CubeCart bis 6.4.2 Session Cookie schwache Authentisierung
PHP 8.1.0-dev Backdoor Remote Command Injection
PHPGurukul COVID19 Testing Management System 1.0 Parameter Admin name Cross Site Scripting
WordPress WP Statistics 13.0.7 SQL Injection
WordPress ReDi Restaurant Reservation 21.0307 Cross Site Scripting
WordPress Plugin Stop Spammers 2021.8 log Reflected Cross-site Scripting (XSS)
Bludit 3.12.0 Backup File plugin.php erweiterte Rechte
QibosoftX1 1.0 client_upgrade_edition.php erweiterte Rechte
PHPPYUN bis 5.0.0 Alibaba Payment Interface alipay_function.php Information Disclosure
Advanced Guestbook 2.4.4 Cross Site Scripting
EgavilanMedia PHPCRUD 1.0 SQL Injection
TinyShop 1.2.0 /evaluate/index.php explain_first/again_explain Cross Site Scripting
Listeo WordPress Theme < = 1.6.10 - Multiple Authenticated IDOR Vulnerabilities
GiveWP WordPress Plugin < = 2.10.3 - Authenticated Persistent XSS
Bello WordPress Theme < = 1.5.9 - Authenticated XFS
Bello WordPress Theme < = 1.5.9 - Unauthenticated Blind SQL Injection
GA Google Analytics WordPress Plugin < = 20210211 - Multiple Authenticated Persistent XSS
Goto WordPress Theme 2.0 - Unauthenticated Blind SQL Injection
Mediumish WordPress Theme < = 1.0.47 - Unauthenticated Reflected XSS & XFS
Magecart Hackers Now hide PHP-Based Backdoor In Website Favicons
LAOBANCMS 2.0 admin/info.php Website SEO Keywords Cross Site Scripting
PHP Timeclock 1.04 Cross Site Scripting
Business Directory Plugin bis 5.11.0 auf WordPress Cross Site Request Forgery
Business Directory Plugin bis 5.11.1 auf WordPress Form Field Cross Site Scripting
Rife Elementor Extensions & Templates Plugin bis 1.1.5 auf WordPress Widget Cross Site Scripting
Image Hover Effects - Elementor Addon Plugin bis 1.3.3 auf WordPress Widget Cross Site Scripting
Livemesh Addons for Elementor Plugin bis 6.7 auf WordPress Widget Cross Site Scripting
Elementor Addon Elements Plugin bis 1.11.1 auf WordPress Widget Cross Site Scripting
Elements Kit Lite Plugin/Elements Kit Pro Plugin bis 2.1.x auf WordPress Widget Cross Site Scripting
Premium Addons for Elementor Plugin bis 4.2.7 auf WordPress Widget Cross Site Scripting
WPBakery Page Builder Clipboard Plugin bis 4.5.7 auf WordPress AJAX Action erweiterte Rechte
OpenID Connect Generic Client Plugin 3.8.0/3.8.1 auf WordPress Cross Site Scripting
b2evolution 7-2-2 SQL Injection
WordPress WP Super Edit 2.5.4 Arbitrary File Upload
CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)
TYPO3 6.2.1 SQL Injection
iCMS 7.0.13 HTTP Request database.admincp.php do_del Directory Traversal
vTiger CRM 7.2 Calendar Export SQL Injection
Moodle 3.6.1 Persistent Cross-Site Scripting (XSS)
Cacti 1.2.12 filter SQL Injection / Remote Code Execution
A New PHP Composer Bug Could Enable Widespread Supply-Chain Attacks
PHPMailer bis 6.4.0 Phar Deserialization addAttachment erweiterte Rechte
WordPress Plugin WPGraphQL 1.3.5 Denial of Service
LocalFilesEditor Extension bis 11.4.0.0 auf Piwigo show_default.php file erweiterte Rechte
PHP OpenID Library vulnerable to XML external entity injection
WordPress Plugin RSS for Yandex Turbo 1.29 - Stored Cross-Site Scripting (XSS)
WordPress WPGraphQL 1.3.5 Denial Of Service
Unbound bis 1.9.4 respip/respip.c Pufferüberlauf
Fast PHP Chat 1.3 | SQL injection
WordPress Plugin RSS for Yandex Turbo 1.29 Stored Cross-Site Scripting (XSS)
OpenEMR 4.1.0 - SQL Injection
Magento LTS bis 19.4.12/20.0.8 SQL Injection [CVE-2021-21427]
Magento LTS bis 19.4.12/20.0.8 erweiterte Rechte [CVE-2021-21426]
Tribal Systems Zenario CMS 8.8.52729 Pugin Library Delete Module ajax.php ID SQL Injection
PHPGurukul Beauty Parlour Management System 1.0 add-services.php sername SQL Injection
PHPGurukul Beauty Parlour Management Syste 1.0 add-services.php sername Cross Site Scripting
LightCMS 1.3.5 External Image NEditorController.php Remote Privilege Escalation
WordPress bis 5.7.0 Editor Information Disclosure
Anuko Time Tracker vor 1.19.27.5431 common.php.lib ttMitigateCSRF Cross Site Request Forgery
Patreon Plugin bis 1.6.x auf WordPress Cross Site Request Forgery
Patreon Plugin bis 1.7.1 auf WordPress AJAX Action patreon_save_attachment_patreon_level Cross Site Scripting
Patreon Plugin bis 1.7.1 auf WordPress Login Form wp-login.php Cross Site Scripting
Patreon Plugin bis 1.6.x auf WordPress wp-config.php Information Disclosure
AccessAlly Plugin bis 3.5.6 auf WordPress product-shortcode.php accessally_order_form Information Disclosure
Advanced Booking Calendar Plugin bis 1.6.6 auf WordPress GET Parameter calId Cross Site Scripting
French English Russian