Home
Home
Grey Skin Blue Skin Green Skin Red Skin

Advisories archive

Searching 24682 links categorized as php vuln/adviso since 2003-04-07

24682 results found, please narrow your search...

Joomla GMapFP 3.30 Arbitrary File Upload
ImpressCMS 1.3.11 - Why you should not trust PHP_SELF
WordPress Wmyx2.0 Themes 2.0 Open Redirection
WordPress ProStore Themes 1.1.2 Open Redirection
WordPress Eurielle Themes 0.1.0 Open Redirection
WordPress FxInfinityTheme Themes 2.2.1 Open Redirection Remote File Inclusion
WordPress Upward Themes 1.5 Open Redirection
Joomla! com_hdwplayer 4.2 search.php SQL Injection
WordPress Grimag Themes 1.2.5 Open Redirection
Wordpress Plugin PicUploader 1.0 - Remote File Upload
rConfig 3.9.4 search.crud.php Remote Command Injection
WordPress Aviary Image Editor Add-On For Gravity Forms Plugins 3.0 Beta R7 CSRF Shell Upload Vulnerability
WordPress WPTouch Switch Desktop 3.x Open Redirection
WordPress Event Themes 1.4 CSRF Shell Upload Vulnerability
WordPress HillReproGraphics Themes 2.0.1 CSRF Shell Upload Vulnerability
WordPress LM17 LottoMaticaItalia Themes 1.0 CSRF Shell Upload Vulnerability
WordPress DailyDeal Themes 3.0 CSRF Shell Upload Vulnerability
WordPress Custom-BackGround Plugins 3.0 CSRF Shell Upload Vulnerability
PHPKB Multi-Language 9 Authenticated Remote Code Execution
PHPKB Multi-Language 9 Authenticated Directory Traversal
Joomla Component com_newsfeeds SQL injection vulnerability
PHP Scripts Mall website-seller Script 2.0.5 Reflected XSS.
PHPStudy Backdoor Remote Code execution (Metasploit)
WordPress Search Meter 2.13.2 CSV Injection
PHPStudy Backdoor Remote Code Execution
60CycleCMS news.php SQL Injection
Wordpress Plugin Tutor LMS 1.5.3 Cross-Site Request Forgery (Add User)
PHP-FPM 7.x Remote Code Execution
PHP-Fusion CMS 9.03 Cross Site Scripting
Magento WooCommerce CardGate Payment Gateway 2.0.30 Payment Process Bypass
ATutor 2.2.4 SQL Injection
word press plugin wpforms-lite 1.5.8.2 - Cross-Site Scripting
Bugtraq: [SECURITY] [DSA 4628-1] php7.0 security update
WordPress WP Sitemap Page 1.6.2 Cross Site Scripting
WordPress Fruitful 3.8 Cross Site Scripting
Bugtraq: [SECURITY] [DSA 4626-1] php7.3 security update
Critical Bug in WordPress Theme Plugin Opens 200,000 Sites to Hackers
phpMyChat Plus 1.98 SQL Injection
PHP 7.0 < 7.4 (Unix) debug_backtrace disable_functions Bypass
WordPress Ultimate-Member 2.1.3 Local File Inclusion
SuiteCRM 7.11.11 Phar Deserialization
SuiteCRM 7.11.11 Second-Order PHP Object Injection
Wordpress Plugin events-manager - Local File Disclosure
Wordpress Plugin wordfence.7.4.5 - Local File Disclosure
Wordpress Plugin tutor.1.5.3 - Local File Inclusion
Wordpress Plugin tutor.1.5.3 - Cross-Site Scripting
LearnDash WordPress LMS 3.1.2 Cross Site Scripting
WordPress InfiniteWP Client Authentication Bypass
Wordpress Plugin contact-form-7.5.1.6 - Remote File Upload
WordPress Plugin ultimate-member 2.1.3 - Local File Inclusion
phpList 3.5.0 Authentication Bypass
PHP 7.0-7.4 disable_functions bypass PoC (*nix only)
Revive Adserver 5.0.3 Cross Site Scripting
WordPress WP Fanzone 3.1 SQL Injection
Built with WordPress and WP FanZone Themes 3.1 SQL Injection
WordPress <= 5.2.3: Hardening Bypass
WordPress Time Capsule 1.21.16 Authentication Bypass
CarSpot – Dealership Wordpress Classified Theme v2.2.0 Multiple Vulnerabilities
WordPress Resim ara 1.0 Cross Site Scripting
Cacti 1.2.8 data_input.php Remote Code Execution [Infragegestellt]
Ultimate FAQ Plugin bis 1.8.29 auf WordPress DisplayFAQs.php Display_FAQ Cross Site Scripting
Cacti 1.2.8 data_sources.php header Cross Site Scripting
Reality | Estate Multipurpose WordPress Theme v2.5.1 Reflected XSS
Real Estate 7 WordPress v2.9.4 Multiple Vulnerabilities
ListingPro - WordPress Directory Theme v2.5.3 Reflected XSS
Travel Booking WordPress Theme v2.7.8.5 Persistent XSS
Houzez - Real Estate WordPress Theme v1.8.3.1 Reflected XSS
Quickjob job board php script 1.0.0 - Persistent Cross-Site Scripting
Quickdate the ultimate php dating platform - XSS Persistence
Breaking PHP's mt_rand() with 2 values and no bruteforce
Wordpress Ultimate Addons for Beaver Builder 1.2.4.1 Authentication Bypass
Glide Wordpress Themes Timthumb RCE
CityBook - Directory & Listing WordPress Theme v2.2.2 Multiple Vulnerabilities
TownHub - Directory & Listing WordPress Theme v1.0.2 Multiple Vulnerabilities
EasyBook – Directory & Listing WordPress Theme v1.2.1 Multiple Vulnerabilities
phpMyChat-Plus 1.98 Cross Site Scripting
WordPress Core < 5.3.x xmlrpc.php Denial of Service
Drupal Warns Web Admins to Update CMS Sites to Patch a Critical Flaw
Flaw in Elementor and Beaver Addons Let Anyone Hack WordPress Sites
Revive Adserver 4.2 Remote Code Execution
SmartHouse Webapp 6.5.33 Cross-Site Request Forgery
Wordpress 5.3 XSS
MyBB 1.8.x UserCP XSS Vulnerability
Dokuwiki 2018-04-22b Username Enumeration
MYBB HTML Form Without CSRF Protection
Superlist - Directory WordPress Theme v2.9.2 Persistent XSS
WordPress Plainview Activity Monitor 20161228 Remote Command Execution
ListingPro - WordPress Directory Theme v2.0.14.2 Reflected & Persistent XSS
Magento Marketplace Suffers Data Breach Exposing Users' Account Info
CMS Made Simple 2.2.8 Remote Code Execution
WordPress Social Photo Gallery 1.0 Remote Code Execution
oXygen XML Editor 21.1.1 XML Injection
FusionPBX Operator Panel exec.php Command Execution
FusionPBX Command exec.php Command Execution
PunBB 1.4.4 Database Disclosure
WordPress Google Review Slider 6.1 SQL Injection
waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 Cross Site Scripting
waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 SQL Injection
WordPress 5.2.4 Cross Origin Resource Sharing
Wordpress FooGallery 1.8.12 Persistent Cross-Site Scripting
French English Russian