Home
Home
Grey Skin Blue Skin Green Skin Red Skin

Advisories archive

Searching 24463 links categorized as php vuln/adviso since 2003-04-07

24463 results found, please narrow your search...

Shopware createInstanceFromNamedArguments PHP Object Instantiation
PHP PHP_INI_SYSTEM Ineffective Controls
phpKF 1.10 XSS / CSRF / SQL Injection
Xoops Wordpress Modules WP-Ktai 0.5.0 Japan Open Redirection
Horde Webmail - XSS + CSRF to SQLi, RCE, Stealing Emails < = v5.2.22
Vuln: Drupal Novalnet Payment Module- Ubercart Module SQL Injection Vulnerability
PHP-Fusion 9.03.00 Remote Code Execution
XOOPS CMS 2.5.9 SQL Injection
WordPress Form Maker 1.13.3 SQL Injection
(Wordpress) Ninja Forms File Uploads Extension < = 3.0.22 – Unauthenticated Arbitrary File Upload
WordPress Diarise 1.5.9 Local File Disclosure
Wordpress - W3 Total Cache - SSRF / RCE
Wordpress Social Warfare Remote Code Execution
phpBB 3.2.5 Denial Of Service
Traveler - Travel Booking WordPress Theme v2.7 Reflected XSS Injection
Joomla! Component JiFile 2.3.1 - Arbitrary File Download
clientResponse Responsive PHP Client Management Stored XSS Injection
Joomla! Component ARI Quiz 3.7.4 - SQL Injection
Joomla! Component com_cwreserveer - SQL Injection
osTicket 1.11 Cross Site Scripting / Local File Inclusion
Critical Unpatched Flaw Disclosed in WordPress WooCommerce Extension
Hackers Actively Exploiting Widely-Used Social Share Plugin for WordPress
JobCareer | Job Board Responsive WordPress Theme v2.5 Stored XSS Injection
Warkers PHP Search Script WebShell Upload
Joomla Core 1.5.0 3.9.4 Directory Traversal / Authenticated Arbitrary File Deletion
Shadow-Fox PhP Uploader Script Cross Site Scripting Vulnerability
WordPress Download Manager 2.9.93 Cross Site Scripting
Drupal Releases Core CMS Updates to Patch Several Vulnerabilities
Tasked PHP Task Management Multiple Stored XSS Injection
OpenDocMan 1.3.4 - Multiple XSS Injection
phpRechnung 1.6.6 - Multiple XSS Injection
BackUpWordPress 3.8 Plugins Backup Path Disclosure Vulnerability
ATutor file_manager Remote Code Execution
WordPress Plugin Contact Form Maker 1.13.1 Cross-Site Request Forgery
Horde Form Shell Upload
Wordpress Markant theme Arbitrary file Download
PHP 7.2 imagecolormatch() Out of Band Heap Write
YiiCMS JetBrains PHPStorm 6.0.3 Database Disclosure
Vuln: WordPress Wordfence Plugin Unspecified Cross Site Scripting Vulnerability
WordPress Limit Login Attempts Reloaded 2.7.4 Bypass
Joomla omponent iPhone homepage icon 2.0.0 Parameter SQL Injection
WordPress Menu Plugin - Mega Main Menu unauthorized backup
WordPress 5.0.0 Crop-image Shell Upload (Metasploit)
WordPress Plugin PayPal Checkout Payment Gateway 1.6.8 Parameter Tampering
WordPress 5.0.0 crop-image Shell Upload
Vuln: Drupal Core SA-CORE-2019-004 Cross Site Scripting Vulnerability
WordPress iOS App Bug Leaked Secret Access Tokens to Third-Party Sites
phpFileManager 1.7.8 Local File Inclusion
CMS Made Simple SQL Injection
WordPress - Nishizawa_Tmp Themes Directory Traversal Vulnerability
WordPress 4.9.x U_Parts Themes Directory Traversal Vulnerability
WordPress Oxygen-Theme Directory Traversal Vulnerability
Critical Magento SQL Injection Vulnerability Discovered – Patch Your Sites
Magento 2.3.0 SQL Injection
WordPress 4.9.10 ButterKekse Plugins Open Redirection
Magento 2.2.0 <= 2.3.0 Unauthenticated SQLi
WordPress 4.9.2 WordPress-Feed-Statistics Plugins 4.1 Open Redirection
MyBB Upcoming Events Plugin 1.32 - Cross-Site Scripting
WordPress 4.6.1 WireFunnel Plugins Open Redirection
WordPress 4.8 Ait-ThemesClub TemplatePreview 1.8.1 RFI Open Redirection
WordPress Ultimate Form Builder Plugins 1.0 Database Disclosure
WordPress 5.1.1 WPBounce AND-AntiBounce Plugins 1.0.3 Open Redirection
WordPress 2.0.2 WP-Forum Plugins 1.7.8 Database Disclosure
Wordpress 5.0.4 begin Themes Open Redirection
Spip CMS 2.x/3.x Add Administrator Account & Insert File Vulnerability
WordPress 3.4.2 The-CL-Amazon-Thingy Plugins 1.0 Open Redirection
WordPress Easy WP SMTP plugin 0-day
WordPress 5.0.4 Age-Verification Plugins 0.5 Open Redirection
WordPress 4.9.8 KingAbdullahPort KAP Themes Database Configuration File Download
WordPress 4.9.x U_Parts Themes Database Configuration File Download
WordPress 4.7.13 ChurcHope Responsive Themes 4.7.x Database Configuration File Download
WordPress 4.2.2 Oxygen-Theme Themes Database Configuration File Download
WordPress 4.x CafeSalivation Themes Database Configuration File Download
WordPress 5.1.1 Slider Revolution 4.6.5 UpdateCaptionsCSS Remote Content Injection
WordPress 4.x Nishizawa_Tmp Themes Database Configuration File Download
MyBB Upcoming Events 1.32 Cross Site Scripting
eNdonesia Portal 8.7 Iframe Injection / SQL Injection
Netartmedia PHP Mall 4.1 SQL Injection
PHP MySQLi Database Class 2.9.2 SQL Injection
WordPress Menu Plugin - Mega Main Menu v2.1.2 unauthorized backup download Vulnerability
Vuln: PHP Information Disclosure and Heap Buffer Overflow Vulnerabilities
WordPress GraceMedia Media Player 1.0 Local File Inclusion
New WordPress Flaw Lets Unauthenticated Remote Attackers Hack Sites
WordPress WP Fastest Cache 0.8.9.0 Arbitrary File Deletion
WordPress 5.1 CSRF to Remote Code Execution
WordPress Aibbt Themes Open Redirection
WordPress Deep Themes Open Redirection
WordPress 2kqq Themes Open Redirection
WordPress Azzxx Themes Open Redirection
phpBB 3.2.3 Remote Code Execution
Drupal RESTful Web Services unserialize() Remote Code Execution
WordPress ii-commerce Themes Unauthorized File Insertation
WordPress nlh_omp-v1 Themes 1.0 Unauthorized File Insertation
WordPress OneSocial-Child Themes Unauthorized File Insertation
WordPress fuecaHome Plugins Unauthorized File Insertation
WordPress WebFatorial-FoodNetwork Themes Unauthorized File Insertation
WordPress wp-bs3-rad Themes Unauthorized File Insertation
WordPress wp-bs3-rad Themes Unauthorized Insert File Vulnerability
WordPress HT-Poi Plugins 2.9 Unauthorized File Insertation
WordPress WP-DreamworkGallery Plugins 2.3 CSRF Backdoor Access Vulnerability
French English Russian