Home
Home
Grey Skin Blue Skin Green Skin Red Skin

Advisories archive

Searching 24714 links categorized as php vuln/adviso since 2003-04-07

24714 results found, please narrow your search...

NeonLMS - Learning Management System PHP Laravel Script - 'Messages' Persistent Cross Site Scripting
WordPress Plugin Multi-Scheduler 1.0.0 - Cross-Site Request Forgery (Delete User)
OpenEMR Remote Code Execution
Wordpress Plugin Form Maker 5.4.1 s SQL Injection (Authenticated)
PHP-Fusion 9.03.50 SQL Injection
WordPress Ajax Load More 5.3.1 SQL Injection
vBulletin 5.6.1 SQL Injection
Netsweeper WebAdmin unixlogin.php Python Code Injection
CuteNews 2.1.2 Authenticated Shell Upload
An Undisclosed Critical Vulnerability Affect vBulletin Forums — Patch Now
CuteNews 2.1.2 Arbitrary File Deletion
WordPress ChopSlider 3 SQL Injection
johncaruso PHP Photo Gallery Remote File Inculsion Vulnerability [ RFI ]
WordPress Themes begin-its-1 Remote File Inclusion
Joomla com_content 1.5 - Blind SQL Vulnerability
Critical Bugs Found in 3 Popular e-Learning Plugins for WordPress Sites
PHP-Fusion 9.03.50 Arbitrary File Upload
phpCollab 2.7.2 - Arbitrary File Upload
Critical Security Patches Released for Magento, Adobe Illustrator and Bridge
phpCollab v2.7.2 - CSRF Arbitrary File Upload RCE PoC Script
Catch Breadcrumb v1.5.4 WordPress plugin - Unauthenticated Reflected XSS
WordPress Weekender Newspaper Themes 9.0 Open Redirection
ThinkPHP 5.0.23 Remote Code Execution
LifeRay CMS (Fckeditor) Arbitrary File Upload Vulnerability
PlaySMS index.php Unauthenticated Template Injection Code Execution
Horde Groupware Webmail Edition 5.2.22 Remote Code Execution
WordPress Eatery Restaurant Themes 2.2 Open Redirection
WordPress justnews-child Themes 1.0 Open Redirection
WordPress Nashvilleparent Themes 1.10 Open Redirection
WordPress Attitude Themes 1.1.1 Open Redirection
WordPress Event-Registration Plugins 5.43 Arbitrary File Upload
WordPress Randy Peterman Murph StatTraq 1.1 SQL Injection
Joomla GMapFP 3.30 Arbitrary File Upload
ImpressCMS 1.3.11 - Why you should not trust PHP_SELF
WordPress Wmyx2.0 Themes 2.0 Open Redirection
WordPress ProStore Themes 1.1.2 Open Redirection
WordPress Eurielle Themes 0.1.0 Open Redirection
WordPress FxInfinityTheme Themes 2.2.1 Open Redirection Remote File Inclusion
WordPress Upward Themes 1.5 Open Redirection
Joomla! com_hdwplayer 4.2 search.php SQL Injection
WordPress Grimag Themes 1.2.5 Open Redirection
Wordpress Plugin PicUploader 1.0 - Remote File Upload
rConfig 3.9.4 search.crud.php Remote Command Injection
WordPress Aviary Image Editor Add-On For Gravity Forms Plugins 3.0 Beta R7 CSRF Shell Upload Vulnerability
WordPress WPTouch Switch Desktop 3.x Open Redirection
WordPress Event Themes 1.4 CSRF Shell Upload Vulnerability
WordPress HillReproGraphics Themes 2.0.1 CSRF Shell Upload Vulnerability
WordPress LM17 LottoMaticaItalia Themes 1.0 CSRF Shell Upload Vulnerability
WordPress DailyDeal Themes 3.0 CSRF Shell Upload Vulnerability
WordPress Custom-BackGround Plugins 3.0 CSRF Shell Upload Vulnerability
PHPKB Multi-Language 9 Authenticated Remote Code Execution
PHPKB Multi-Language 9 Authenticated Directory Traversal
Joomla Component com_newsfeeds SQL injection vulnerability
PHP Scripts Mall website-seller Script 2.0.5 Reflected XSS.
PHPStudy Backdoor Remote Code execution (Metasploit)
WordPress Search Meter 2.13.2 CSV Injection
PHPStudy Backdoor Remote Code Execution
60CycleCMS news.php SQL Injection
Wordpress Plugin Tutor LMS 1.5.3 Cross-Site Request Forgery (Add User)
PHP-FPM 7.x Remote Code Execution
PHP-Fusion CMS 9.03 Cross Site Scripting
Magento WooCommerce CardGate Payment Gateway 2.0.30 Payment Process Bypass
ATutor 2.2.4 SQL Injection
word press plugin wpforms-lite 1.5.8.2 - Cross-Site Scripting
Bugtraq: [SECURITY] [DSA 4628-1] php7.0 security update
WordPress WP Sitemap Page 1.6.2 Cross Site Scripting
WordPress Fruitful 3.8 Cross Site Scripting
Bugtraq: [SECURITY] [DSA 4626-1] php7.3 security update
Critical Bug in WordPress Theme Plugin Opens 200,000 Sites to Hackers
phpMyChat Plus 1.98 SQL Injection
PHP 7.0 < 7.4 (Unix) debug_backtrace disable_functions Bypass
WordPress Ultimate-Member 2.1.3 Local File Inclusion
SuiteCRM 7.11.11 Phar Deserialization
SuiteCRM 7.11.11 Second-Order PHP Object Injection
Wordpress Plugin events-manager - Local File Disclosure
Wordpress Plugin wordfence.7.4.5 - Local File Disclosure
Wordpress Plugin tutor.1.5.3 - Local File Inclusion
Wordpress Plugin tutor.1.5.3 - Cross-Site Scripting
LearnDash WordPress LMS 3.1.2 Cross Site Scripting
WordPress InfiniteWP Client Authentication Bypass
Wordpress Plugin contact-form-7.5.1.6 - Remote File Upload
WordPress Plugin ultimate-member 2.1.3 - Local File Inclusion
phpList 3.5.0 Authentication Bypass
PHP 7.0-7.4 disable_functions bypass PoC (*nix only)
Revive Adserver 5.0.3 Cross Site Scripting
WordPress WP Fanzone 3.1 SQL Injection
Built with WordPress and WP FanZone Themes 3.1 SQL Injection
WordPress <= 5.2.3: Hardening Bypass
WordPress Time Capsule 1.21.16 Authentication Bypass
CarSpot – Dealership Wordpress Classified Theme v2.2.0 Multiple Vulnerabilities
WordPress Resim ara 1.0 Cross Site Scripting
Cacti 1.2.8 data_input.php Remote Code Execution [Infragegestellt]
Ultimate FAQ Plugin bis 1.8.29 auf WordPress DisplayFAQs.php Display_FAQ Cross Site Scripting
Cacti 1.2.8 data_sources.php header Cross Site Scripting
Reality | Estate Multipurpose WordPress Theme v2.5.1 Reflected XSS
Real Estate 7 WordPress v2.9.4 Multiple Vulnerabilities
ListingPro - WordPress Directory Theme v2.5.3 Reflected XSS
Travel Booking WordPress Theme v2.7.8.5 Persistent XSS
Houzez - Real Estate WordPress Theme v1.8.3.1 Reflected XSS
Quickjob job board php script 1.0.0 - Persistent Cross-Site Scripting
French English Russian