Home
Home
Grey Skin Blue Skin Green Skin Red Skin

Advisories archive

Searching 24599 links categorized as php vuln/adviso since 2003-04-07

24599 results found, please narrow your search...

Dokuwiki 2018-04-22b Username Enumeration
MYBB HTML Form Without CSRF Protection
Superlist - Directory WordPress Theme v2.9.2 Persistent XSS
WordPress Plainview Activity Monitor 20161228 Remote Command Execution
ListingPro - WordPress Directory Theme v2.0.14.2 Reflected & Persistent XSS
Magento Marketplace Suffers Data Breach Exposing Users' Account Info
CMS Made Simple 2.2.8 Remote Code Execution
WordPress Social Photo Gallery 1.0 Remote Code Execution
oXygen XML Editor 21.1.1 XML Injection
FusionPBX Operator Panel exec.php Command Execution
FusionPBX Command exec.php Command Execution
PunBB 1.4.4 Database Disclosure
WordPress Google Review Slider 6.1 SQL Injection
waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 Cross Site Scripting
waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 SQL Injection
WordPress 5.2.4 Cross Origin Resource Sharing
Wordpress FooGallery 1.8.12 Persistent Cross-Site Scripting
New PHP Flaw Could Let Attackers Hack Sites Running On Nginx Servers
WordPress Arforms 3.7.1 Directory Traversal
MrBlog PHP Script Multiple Vulnerabilities
Wordpress Sliced Invoices < = 3.8.2 Authenticated SQL Injection
Wordpress Groundhogg < = 1.3.2 Authentificated SQL Injection
Wordpress Sliced Invoices < = 3.8.2 Authenticated Reflected XSS
WordPress Soliloquy Lite 2.5.6 Cross Site Scripting
WordPress FooGallery 1.8.12 Cross Site Scripting
WordPress Popup Builder 3.49 Cross Site Scripting
WordPress Broken Link Checker 1.11.8 Cross Site Scripting
vBulletin 5.0 < 5.5.4 updateAvatar Authenticated Remote Code Execution
Joomla 1.5.15 Cactus 1.2.0 SQL Injection
Joomla Vemod News Mailer 1.0 SQL Injection
Joomla MisterEstate 1.5.26 SQL Injection
Joomla 1.5.26 Google Maps 1.0.4 SQL Injection
Joomla MediaLibrary 1.5.26 SQL Injection
Joomla 1.5.26 Mad4Joomla 1.1.x SQL Injection
Joomla SwPhotoGallery 1.5.26 SQL Injection
Joomla Sumoku 3.9.8 SQL Injection
vBulletin Releases Patch Update for New RCE and SQLi Vulnerabilities
vBulletin 5.5.4 Remote Code Execution
vBulletin 5.5.4 SQL Injection
PHP 7.3 disable_functions Bypass
vBulletin 5.x 0-Day Pre-Auth Remote Command Execution
Zoner - Real Estate WordPress Theme v4.1.1 Persistent XSS & IDOR
[Unpatched] Critical 0-Day RCE Exploit for vBulletin Forum Disclosed Publicly
vBulletin 5.x Pre-Auth Remote Code Execution
WordPress Plugin Sell Downloads 1.0.86 Cross-Site Scripting
jommla component ccnewsletter 2.2.4 - 'sbid' Parameter SQL Injection
Dokeos 1.8.6.1 / 1.8.6.3 Arbitrary File Upload
Warning: Researcher Drops phpMyAdmin Zero-Day Affecting All Versions
InJob | Multi-purpose for recruitment WordPress Theme v3.3.6 Reflected & Persistent XSS
phpMyAdmin 4.9.0.1 Cross Site Request Forgery
WordPress Plugin Photo Gallery 1.5.34 SQL Injection
WordPress Checklist 1.1.5 Cross Site Scripting
WordPress Qwiz Online Quizzes And Flashcards 3.36 Cross Site Scripting
WordPress Sell Downloads 1.0.86 Cross Site Scripting
Reality | Estate Multipurpose WordPress Theme Persistent XSS
WordPress Plugin UserPro 4.9.32 Cross-Site Scripting
WordPress 5.2.3 Remote Cross Site Host Modification
Nexos - Real Estate WordPress Theme SQL Injection & Persistent XSS
Wordpress Plugin Event Tickets 4.10.7.1 CSV Injection
WordPress API Bearer Auth 20181229 Cross Site Scripting
WordPress Ecpay Logistics For WooCommerce 1.2.181030 Cross Site Scripting
Multiple Code Execution Flaws Found In PHP Programming Language
WordPress Portrait-Archiv.com Photostore 5.0.4 Cross Site Scripting
WordPress Spryng Payments WooCommerce 1.6.7 Cross Site Scripting
WordPress Event Tickets 4.10.7.1 CSV Injection
YouPHPTube 7.4 Remote Code Execution
Wordpress Gallery Objects Version 0.4 SQL Injection vulnerability
X-Cart DesignHouse MonarchDigitalMedia MagicAngel SQL Injection
Joomla 1.5.26 Com_OrgChart Components 1.0.0 XSS SQL Injection
Joomla 1.5.26 Com_FireBoard Components 1.1.3 SQL Injection
Mambo Miro International Infoerbe XSS SQL Injection
vBulletin Reflected XSS via "Click here"
Joomla 1.5.26 Com_AlphaContent Components 3.x SQL Injection
Joomla 1.5.26 Com_EstateAgent Components 3.x SQL Injection
MediaWiki 1.27.4 content sniffing Vulnerability
phpPgAdmin-5.1 file enumeration && XSS
MediaWiki OAuth2 Client 0.3 Cross Site Request Forgery
How Activity Logs Help WordPress Admins Better Manage Website Security
Joomla JS Jobs 1.2.5 SQL Injection
osTicket 1.12 Formula Injection
osTicket 1.12 File Upload Cross Site Scripting
osTicket 1.12 Cross Site Scripting
Joomla JS Support Ticket 1.1.5 Arbitrary File Download
Joomla! Component JS Support Ticket (component com_jssupportticket) 1.1.5 SQL Injection
WordPress JoomSport 3.3 SQL Injection
ATutor 2.2.4 Arbitrary File Upload / Command Execution
Active PHP Bookmarks 1.3 SQL Injection
ibrowser phpthumb Command Injection
Yahei-PHP Prober 0.4.7 HTML Injection
Ovidentia 8.4.3 SQL Injection
Real Estate 7 - Real Estate WordPress Theme v2.8.9 Persistent XSS Injection
WordPress OneSignal 1.17.5 Cross Site Scripting
WordPress Plugin OneSignal 1.17.5 subdomain Persistent Cross-Site Scripting
phpFK 8.0 version Reinstall Add Admin Vulnerability
PHP Laravel Framework Token Unserialize Remote Command Execution
Nagios XI 5.5.6 Magpie_debug.php Root Remote Code Execution (Metasploit)
phpFK lite-version Cross Site Scripting
WordPress Like Button 1.6.0 Authentication Bypass
Magento 2.3.1: Unauthenticated Stored XSS to RCE
SquirrelMail 1.4.22 Cross Site Scripting
French English Russian