Home
Home
Grey Skin Blue Skin Green Skin Red Skin

Advisories archive

Searching 24040 links categorized as php vuln/adviso since 2003-04-07

24040 results found, please narrow your search...

WordPress Dreamsmiths Themes 0.0.1 Arbitrary File Download
phpMeteo v1.6 sensitive information disclosure Vulnerability
New PHP Code Execution Attack Puts WordPress Sites at Risk
Pimcore 5.2.3 SQL Injection / Cross-Site Scripting / Cross-Site Request Forgery
Active Matrimonial CMS v1.4 - Arbitrary File Upload
New PHP Exploitation Technique Added
PlayTube - The Ultimate PHP Video CMS & Video Sharing Platform 1.4.3 privilege escalation Vulnerability
cPanel Filename Based Stored XSS < = v76
OpenEMR < 5.0.1 Remote Code Execution
PHP Template Store Script 3.0.6 Cross Site Scripting
Vuln: PHP Multiple Heap Buffer Overflow Vulnerabilities
Laravel 4.2 sensitive information disclosure Vulnerability
CMS ISWEB 3.5.3 Directory Traversal
Bugtraq: [SECURITY] [DSA 4262-1] symfony security update
Auditor Website 2.0.1 Cross-Site Scripting
uhotel booking 2.79. XML external entity injection Vulnerability
Symfony Flaw Leaves Drupal Sites Vulnerable to Hackers—Patch Now
DataLife Engine 13.0 Cross Site Scripting
Drupal Access Control Flaw in Symfony HttpFoundation Component Lets Remote Users Bypass Security Restrictions on the Target System
Securing Credentials for PHP with Docker
Keeping Credentials Secure in PHP
DataLife Engine Core Cross Site Scripting (XSS) & Execution Code
Web Design itemDesc.php site sql injection
Super Cms Blog Pro PHP Script v1.0 - XSS
WordPress Plugin Responsive Thumbnail Slider Arbitrary File Upload (Metasploit)
Symfony Remote Information Disclosure
Super CMS Blog Pro PHP Script 1.0 SQL Injection / Shell Upload
WordPress Gwolle Guestbook 2.5.3 Cross Site Scripting
WordPress Strong Testimonials 2.31.4 Cross Site Scripting
WordPress Snazzy Maps 1.1.3 Cross Site Scripting
Bugtraq: DefenseCode ThunderScan SAST Advisory: WordPress Gwolle Guestbook Plugin XSS Security Vulnerability
Bugtraq: DefenseCode ThunderScan SAST Advisory: WordPress Strong Testimonials Plugin Multiple XSS Security Vulnerabilities
Bugtraq: DefenseCode ThunderScan SAST Advisory: WordPress Snazzy Maps Plugin Multiple XSS Security Vulnerabilities
MyBB New Threads 1.1 Cross Site Scripting
PrestaShop < 1.6.1.19 AES CBC Privilege Escalation
CMS Made Simple 2.2.5 Authenticated Remote Command Execution
Modx Revolution Remote Code Execution
Bugtraq: [SECURITY] [DSA 4250-1] wordpress security update
PHP Whois Script Cross Site Scripting Vulnerability
PrestaShop 1.6 Privilege Escalation
phpMyAdmin 4.8.1 Authenticated Remote Code Execution (metasploit)
Wchat - Fully Responsive PHP AJAX Chat Script 1.5 unrestricted file upload Vulnerability
wordpress file-away plugin - File Disclosure
PHPMailer Test Page < 5.0 Cross-Site-Scripting
Wordpres Simple 301 Redirects - Addon - Bulk CSV Uploader plugin Cross Site Scripting Vulnerability
Vuln: phpMyAdmin PMASA-2017-8 Security Bypass Vulnerability
joomla jsn gruve pro 2.1.0 Directory traversal Vulnerability
Vuln: WordPress CVE-2018-12895 Directory Traversal Vulnerability
WordPress 4.9.6 Arbitrary File Deletion
WordPress Plugin Advanced Order Export For WooCommerce < 1.5.4 CSV Injection
Wordpress <= 4.9.6 Arbitrary File Deletion Vulnerability Exploit
Unpatched WordPress Flaw Gives Attackers Full Control Over Your Site
WARNING: WordPress File Delete to Code Execution
Vuln: PHP 'ext/exif/exif.c' Denial of Service Vulnerability
WordPress Plugin iThemes Security < 7.0.3 SQL Injection
WordPress Plugin weixin robot advanced 4.4 Cross-Site-Scripting
WebinarPHP Script Cross-Site-Scripting
WordPress Design By SmartCatDesign.Net ImageManager Plugin Remote File Upload Vulnerability
WordPress Design By SmartCat.Net ImageManager Plugin Remote File Upload Vulnerability
phpMyAdmin 4.8.1 (Authenticated) Local File Inclusion
WordPress DrcSystems EthicSolutions Jssor-Slider Library Plugin Arbitrary File Upload Vulnerability
Drupal 7 ItalianGov Fi.it Scrivi Al Comune Arbitrary File Upload Vulnerability
Joomla! Component Jomres 9.11.2 Cross-Site Request Forgery (Add User)
Wordpress <= 4.8.2 SQL Injection POC
phpMyAdmin 4.8.x LFI to RCE (Authorization Required)
phpMyAdmin 4.7.x XSRF/CSRF Vulnerability (PMASA-2017-9) Exploit
Magento Hackers Using Simple Evasion Trick to Reinfect Sites With Malware
Testlink 1.9.18 gettestcasesummary.php SQL Injection 0day
phpMyAdmin 4.x Remote Code Execution
NewsBee CMS 1.4 content-sniffing Vulnerability
Bugtraq: [SECURITY] [DSA 4228-1] spip security update
Joomla Component Ek rishta 2.10 SQL Injection
Redaxo CMS Mediapool Arbitrary File Upload
WordPress Tooltipy 5.0 Cross Site Scripting
WordPress Redirection 2.7.3 Remote File Inclusion
WordPress Tooltipy 5.0 Cross Site Request Forgery
Bugtraq: DefenseCode ThunderScan SAST Advisory: WordPress WP Google Map Plugin Multiple SQL injection Security Vulnerabilities
Bugtraq: DefenseCode ThunderScan SAST Advisory: WordPress Ultimate Form Builder Lite Plugin Multiple Vulnerabilities (XSS and SQLi)
wp-content themes clinell Local File Disclosure Vulnerability
wp-content themes ypo-theme Local File Disclosure Vulnerability
wp-content uploads sb-download.php Local File Disclosure Vulnerability
Joomla com_rsfiles Local File Disclosure Vulnerability
WordPress Theme Sydney by aThemes 2018 GravityForms Input Remote File Upload Vulnerability
Bugtraq: DefenseCode ThunderScan SAST Advisory: WordPress Contact Form Maker Plugin Multiple Security Vulnerabilities
Bugtraq: DefenseCode ThunderScan SAST Advisory: WordPress Form Maker Plugin Multiple Security Vulnerabilities
Joomla! Component dj-imageslider 3.2.3-3.1.0 - Arbitrary File Upload Vulnerability
PHP 7.2.2 php_stream_url_wrap_http_ex Buffer Overflow
MyBB Recent Threads 1.0 Cross Site Scripting
Over 115,000 Drupal Sites Still Vulnerable to Drupalgeddon2 Exploit
Vuln: WordPress CVE-2018-10101 Security Vulnerability
PHP Dashboards NEW 5.5 SQL Injection
WordPress Headway Theme The Drag and Drop SQL Injection Vulnerability
Wordpress Plugin Events Calendar SQL Injection
Joomla! Component jCart for OpenCart 2.3.0.2 Cross-Site Request Forgery
MyBB Moderator Log Notes 1.1 Cross Site Scripting
Joomla Content Editor JCE ImageManager Vulnerability Mass Auto Exploiter
WordPress Plugin Peugeot Music Arbitrary File Upload
Bugtraq: PHP Login & User Management <= 4.1.0 - Arbitrary File Upload (CVE-2018-11392)
Joomla! Multiple Flaws Let Remote Authenticated Users Modify ACLs and Execute Arbitrary Code, Remote Users Obtain Potentially Sensitive Information and Conduct Cross-Site Scripting Attacks, and Local Users Obtain Passwords
WP-Plugins Peugeot Music Plugin Arbitrary File Upload
French English Russian