Home
Home
Grey Skin Blue Skin Green Skin Red Skin

Advisories archive

Searching 24630 links categorized as php vuln/adviso since 2003-04-07

24630 results found, please narrow your search...

Revive Adserver 5.0.3 Cross Site Scripting
WordPress WP Fanzone 3.1 SQL Injection
Built with WordPress and WP FanZone Themes 3.1 SQL Injection
WordPress <= 5.2.3: Hardening Bypass
WordPress Time Capsule 1.21.16 Authentication Bypass
CarSpot – Dealership Wordpress Classified Theme v2.2.0 Multiple Vulnerabilities
WordPress Resim ara 1.0 Cross Site Scripting
Cacti 1.2.8 data_input.php Remote Code Execution [Infragegestellt]
Ultimate FAQ Plugin bis 1.8.29 auf WordPress DisplayFAQs.php Display_FAQ Cross Site Scripting
Cacti 1.2.8 data_sources.php header Cross Site Scripting
Reality | Estate Multipurpose WordPress Theme v2.5.1 Reflected XSS
Real Estate 7 WordPress v2.9.4 Multiple Vulnerabilities
ListingPro - WordPress Directory Theme v2.5.3 Reflected XSS
Travel Booking WordPress Theme v2.7.8.5 Persistent XSS
Houzez - Real Estate WordPress Theme v1.8.3.1 Reflected XSS
Quickjob job board php script 1.0.0 - Persistent Cross-Site Scripting
Quickdate the ultimate php dating platform - XSS Persistence
Breaking PHP's mt_rand() with 2 values and no bruteforce
Wordpress Ultimate Addons for Beaver Builder 1.2.4.1 Authentication Bypass
Glide Wordpress Themes Timthumb RCE
CityBook - Directory & Listing WordPress Theme v2.2.2 Multiple Vulnerabilities
TownHub - Directory & Listing WordPress Theme v1.0.2 Multiple Vulnerabilities
EasyBook – Directory & Listing WordPress Theme v1.2.1 Multiple Vulnerabilities
phpMyChat-Plus 1.98 Cross Site Scripting
WordPress Core < 5.3.x xmlrpc.php Denial of Service
Drupal Warns Web Admins to Update CMS Sites to Patch a Critical Flaw
Flaw in Elementor and Beaver Addons Let Anyone Hack WordPress Sites
Revive Adserver 4.2 Remote Code Execution
SmartHouse Webapp 6.5.33 Cross-Site Request Forgery
Wordpress 5.3 XSS
MyBB 1.8.x UserCP XSS Vulnerability
Dokuwiki 2018-04-22b Username Enumeration
MYBB HTML Form Without CSRF Protection
Superlist - Directory WordPress Theme v2.9.2 Persistent XSS
WordPress Plainview Activity Monitor 20161228 Remote Command Execution
ListingPro - WordPress Directory Theme v2.0.14.2 Reflected & Persistent XSS
Magento Marketplace Suffers Data Breach Exposing Users' Account Info
CMS Made Simple 2.2.8 Remote Code Execution
WordPress Social Photo Gallery 1.0 Remote Code Execution
oXygen XML Editor 21.1.1 XML Injection
FusionPBX Operator Panel exec.php Command Execution
FusionPBX Command exec.php Command Execution
PunBB 1.4.4 Database Disclosure
WordPress Google Review Slider 6.1 SQL Injection
waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 Cross Site Scripting
waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 SQL Injection
WordPress 5.2.4 Cross Origin Resource Sharing
Wordpress FooGallery 1.8.12 Persistent Cross-Site Scripting
New PHP Flaw Could Let Attackers Hack Sites Running On Nginx Servers
WordPress Arforms 3.7.1 Directory Traversal
MrBlog PHP Script Multiple Vulnerabilities
Wordpress Sliced Invoices < = 3.8.2 Authenticated SQL Injection
Wordpress Groundhogg < = 1.3.2 Authentificated SQL Injection
Wordpress Sliced Invoices < = 3.8.2 Authenticated Reflected XSS
WordPress Soliloquy Lite 2.5.6 Cross Site Scripting
WordPress FooGallery 1.8.12 Cross Site Scripting
WordPress Popup Builder 3.49 Cross Site Scripting
WordPress Broken Link Checker 1.11.8 Cross Site Scripting
vBulletin 5.0 < 5.5.4 updateAvatar Authenticated Remote Code Execution
Joomla 1.5.15 Cactus 1.2.0 SQL Injection
Joomla Vemod News Mailer 1.0 SQL Injection
Joomla MisterEstate 1.5.26 SQL Injection
Joomla 1.5.26 Google Maps 1.0.4 SQL Injection
Joomla MediaLibrary 1.5.26 SQL Injection
Joomla 1.5.26 Mad4Joomla 1.1.x SQL Injection
Joomla SwPhotoGallery 1.5.26 SQL Injection
Joomla Sumoku 3.9.8 SQL Injection
vBulletin Releases Patch Update for New RCE and SQLi Vulnerabilities
vBulletin 5.5.4 Remote Code Execution
vBulletin 5.5.4 SQL Injection
PHP 7.3 disable_functions Bypass
vBulletin 5.x 0-Day Pre-Auth Remote Command Execution
Zoner - Real Estate WordPress Theme v4.1.1 Persistent XSS & IDOR
[Unpatched] Critical 0-Day RCE Exploit for vBulletin Forum Disclosed Publicly
vBulletin 5.x Pre-Auth Remote Code Execution
WordPress Plugin Sell Downloads 1.0.86 Cross-Site Scripting
jommla component ccnewsletter 2.2.4 - 'sbid' Parameter SQL Injection
Dokeos 1.8.6.1 / 1.8.6.3 Arbitrary File Upload
Warning: Researcher Drops phpMyAdmin Zero-Day Affecting All Versions
InJob | Multi-purpose for recruitment WordPress Theme v3.3.6 Reflected & Persistent XSS
phpMyAdmin 4.9.0.1 Cross Site Request Forgery
WordPress Plugin Photo Gallery 1.5.34 SQL Injection
WordPress Checklist 1.1.5 Cross Site Scripting
WordPress Qwiz Online Quizzes And Flashcards 3.36 Cross Site Scripting
WordPress Sell Downloads 1.0.86 Cross Site Scripting
Reality | Estate Multipurpose WordPress Theme Persistent XSS
WordPress Plugin UserPro 4.9.32 Cross-Site Scripting
WordPress 5.2.3 Remote Cross Site Host Modification
Nexos - Real Estate WordPress Theme SQL Injection & Persistent XSS
Wordpress Plugin Event Tickets 4.10.7.1 CSV Injection
WordPress API Bearer Auth 20181229 Cross Site Scripting
WordPress Ecpay Logistics For WooCommerce 1.2.181030 Cross Site Scripting
Multiple Code Execution Flaws Found In PHP Programming Language
WordPress Portrait-Archiv.com Photostore 5.0.4 Cross Site Scripting
WordPress Spryng Payments WooCommerce 1.6.7 Cross Site Scripting
WordPress Event Tickets 4.10.7.1 CSV Injection
YouPHPTube 7.4 Remote Code Execution
Wordpress Gallery Objects Version 0.4 SQL Injection vulnerability
X-Cart DesignHouse MonarchDigitalMedia MagicAngel SQL Injection
Joomla 1.5.26 Com_OrgChart Components 1.0.0 XSS SQL Injection
French English Russian