Home
Home
Grey Skin Blue Skin Green Skin Red Skin

Advisories archive

Searching 24731 links categorized as php vuln/adviso since 2003-04-07

24731 results found, please narrow your search...

Nagios XI 5.6.12 export-rrd.php Remote Code Execution
OpenEMR 5.0.1 controller Remote Code Execution
EQDKP Plus CMS 2.3.29 Cross Site Scripting
ATutor 2.2.4 Directory Traversal / Remote Code Execution
TYPO3 CMS SQL Injection
e-learning PHP Script 0.1.0 SQL Injection
Nexos - Real Estate WordPress Theme v1.7 - Multiple Vulnerabilities
Travel Booking WordPress Theme v2.8.1 - Unauthenticated Reflected XSS
TownHub - Directory & Listing WordPress Theme v1.2.9 - Unauthenticated Reflected XSS
CityBook - Directory & Listing WordPress Theme v2.4.3 - Unauthenticated Reflected XSS
CMS Made Simple 2.2.14 moduleinterface.php Cross Site Scripting
College-Management-System-Php 1.0 SQL Injection
PHP-Fusion 9.03.60 PHP Object Injection / SQL Injection
Joomla J2 Store 3.3.11 SQL Injection
Plesk/myLittleAdmin ViewState .NET Deserialization (Metasploit)
NeonLMS - Learning Management System PHP Laravel Script - 'Arbitrary' File Download
osTicket 1.14.1 Saved Search Persistent Cross-Site Scripting
NeonLMS - Learning Management System PHP Laravel Script - 'Messages' Persistent Cross Site Scripting
WordPress Plugin Multi-Scheduler 1.0.0 - Cross-Site Request Forgery (Delete User)
OpenEMR Remote Code Execution
Wordpress Plugin Form Maker 5.4.1 s SQL Injection (Authenticated)
PHP-Fusion 9.03.50 SQL Injection
WordPress Ajax Load More 5.3.1 SQL Injection
vBulletin 5.6.1 SQL Injection
Netsweeper WebAdmin unixlogin.php Python Code Injection
CuteNews 2.1.2 Authenticated Shell Upload
An Undisclosed Critical Vulnerability Affect vBulletin Forums — Patch Now
CuteNews 2.1.2 Arbitrary File Deletion
WordPress ChopSlider 3 SQL Injection
johncaruso PHP Photo Gallery Remote File Inculsion Vulnerability [ RFI ]
WordPress Themes begin-its-1 Remote File Inclusion
Joomla com_content 1.5 - Blind SQL Vulnerability
Critical Bugs Found in 3 Popular e-Learning Plugins for WordPress Sites
PHP-Fusion 9.03.50 Arbitrary File Upload
phpCollab 2.7.2 - Arbitrary File Upload
Critical Security Patches Released for Magento, Adobe Illustrator and Bridge
phpCollab v2.7.2 - CSRF Arbitrary File Upload RCE PoC Script
Catch Breadcrumb v1.5.4 WordPress plugin - Unauthenticated Reflected XSS
WordPress Weekender Newspaper Themes 9.0 Open Redirection
ThinkPHP 5.0.23 Remote Code Execution
LifeRay CMS (Fckeditor) Arbitrary File Upload Vulnerability
PlaySMS index.php Unauthenticated Template Injection Code Execution
Horde Groupware Webmail Edition 5.2.22 Remote Code Execution
WordPress Eatery Restaurant Themes 2.2 Open Redirection
WordPress justnews-child Themes 1.0 Open Redirection
WordPress Nashvilleparent Themes 1.10 Open Redirection
WordPress Attitude Themes 1.1.1 Open Redirection
WordPress Event-Registration Plugins 5.43 Arbitrary File Upload
WordPress Randy Peterman Murph StatTraq 1.1 SQL Injection
Joomla GMapFP 3.30 Arbitrary File Upload
ImpressCMS 1.3.11 - Why you should not trust PHP_SELF
WordPress Wmyx2.0 Themes 2.0 Open Redirection
WordPress ProStore Themes 1.1.2 Open Redirection
WordPress Eurielle Themes 0.1.0 Open Redirection
WordPress FxInfinityTheme Themes 2.2.1 Open Redirection Remote File Inclusion
WordPress Upward Themes 1.5 Open Redirection
Joomla! com_hdwplayer 4.2 search.php SQL Injection
WordPress Grimag Themes 1.2.5 Open Redirection
Wordpress Plugin PicUploader 1.0 - Remote File Upload
rConfig 3.9.4 search.crud.php Remote Command Injection
WordPress Aviary Image Editor Add-On For Gravity Forms Plugins 3.0 Beta R7 CSRF Shell Upload Vulnerability
WordPress WPTouch Switch Desktop 3.x Open Redirection
WordPress Event Themes 1.4 CSRF Shell Upload Vulnerability
WordPress HillReproGraphics Themes 2.0.1 CSRF Shell Upload Vulnerability
WordPress LM17 LottoMaticaItalia Themes 1.0 CSRF Shell Upload Vulnerability
WordPress DailyDeal Themes 3.0 CSRF Shell Upload Vulnerability
WordPress Custom-BackGround Plugins 3.0 CSRF Shell Upload Vulnerability
PHPKB Multi-Language 9 Authenticated Remote Code Execution
PHPKB Multi-Language 9 Authenticated Directory Traversal
Joomla Component com_newsfeeds SQL injection vulnerability
PHP Scripts Mall website-seller Script 2.0.5 Reflected XSS.
PHPStudy Backdoor Remote Code execution (Metasploit)
WordPress Search Meter 2.13.2 CSV Injection
PHPStudy Backdoor Remote Code Execution
60CycleCMS news.php SQL Injection
Wordpress Plugin Tutor LMS 1.5.3 Cross-Site Request Forgery (Add User)
PHP-FPM 7.x Remote Code Execution
PHP-Fusion CMS 9.03 Cross Site Scripting
Magento WooCommerce CardGate Payment Gateway 2.0.30 Payment Process Bypass
ATutor 2.2.4 SQL Injection
word press plugin wpforms-lite 1.5.8.2 - Cross-Site Scripting
Bugtraq: [SECURITY] [DSA 4628-1] php7.0 security update
WordPress WP Sitemap Page 1.6.2 Cross Site Scripting
WordPress Fruitful 3.8 Cross Site Scripting
Bugtraq: [SECURITY] [DSA 4626-1] php7.3 security update
Critical Bug in WordPress Theme Plugin Opens 200,000 Sites to Hackers
phpMyChat Plus 1.98 SQL Injection
PHP 7.0 < 7.4 (Unix) debug_backtrace disable_functions Bypass
WordPress Ultimate-Member 2.1.3 Local File Inclusion
SuiteCRM 7.11.11 Phar Deserialization
SuiteCRM 7.11.11 Second-Order PHP Object Injection
Wordpress Plugin events-manager - Local File Disclosure
Wordpress Plugin wordfence.7.4.5 - Local File Disclosure
Wordpress Plugin tutor.1.5.3 - Local File Inclusion
Wordpress Plugin tutor.1.5.3 - Cross-Site Scripting
LearnDash WordPress LMS 3.1.2 Cross Site Scripting
WordPress InfiniteWP Client Authentication Bypass
Wordpress Plugin contact-form-7.5.1.6 - Remote File Upload
WordPress Plugin ultimate-member 2.1.3 - Local File Inclusion
phpList 3.5.0 Authentication Bypass
French English Russian