Home
Home
Grey Skin Blue Skin Green Skin Red Skin

Advisories archive

Searching 24937 links categorized as php vuln/adviso since 2003-04-07

24937 results found, please narrow your search...

CologneBlue Skin bis 1.35 auf MediaWiki qbfind Message CologneBlueTemplate.php Cross Site Scripting
SPIP bis 3.2.7 configurer_preferences.php unbekannte Schwachstelle
PollNY Extension bis 1.35 auf MediaWiki Answer Option Cross Site Scripting
Online Doctor Appointment Booking System PHP and Mysql 1.0 q SQL Injection
WordPress Fancy Product Designer For WooCommerce 4.5.1 File Upload
Vtiger CRM 7.0 Cross Site Scripting
WordPress WP Forms 1.6.3.1 Cross SIte Scripting
WordPress Buddypress 6.2.0 Cross Site Scripting
SugarCRM 6.5.18 Cross Site Scripting
WordPress Good LMS 2.1.4 SQL Injection
rConfig bis 3.9.6 lib/crud/userprocess.php schwache Authentisierung
Good Layers LMS Plugin bis 2.1.4 auf WordPress POST Parameter wp_ajax_nopriv id SQL Injection
Cacti 1.2.13 Template Import templates_import.php xml_path Cross Site Scripting
Wordpress Plugin Good LMS 2.1.4 id Unauthenticated SQL Injection
WordPress File Manager 6.8 Remote Code Execution
BA Book Everything WordPress plugin v1.3.24 - Unauthenticated Reflected XSS & XFS
Wordpress Plugin Yoast SEO 15.2.1 - Remote File Upload
Wordpress Plugin Jetpack 9.1 - Cross Site Scripting
Wordpress Plugin Rank Math v1.0.52.1 - Remote Command Execution
Altair WordPress theme v4.8 - Unauthenticated Reflected XSS
Love Travel WordPress theme v3.8 - Unauthenticated Reflected XSS
Love Travel WordPress theme v1.9 - Unauthenticated Reflected XSS
Mitel ShoreTel 19.46.1802.0 Home Meeting Page index.php PATH_INFO Cross Site Scripting
Magento bis 2.3.5p1/2.4.0 File Upload erweiterte Rechte
Magento bis 2.3.4/2.4.0 Installation Information Disclosure
Magento bis 2.3.5p1/2.4.0 Inventory Module erweiterte Rechte
Magento bis 2.3.5p1/2.4.0 Integrations erweiterte Rechte
Magento bis 2.3.5p1/2.4.0 Inventory Source erweiterte Rechte
Magento bis 2.3.5p1/2.4.0 Authorization erweiterte Rechte
Magento bis 2.3.5/2.4.0 SQL Injection [CVE-2020-24400]
usc-e-shop Plugin bis 1.9.35 auf WordPress usces_unserialize erweiterte Rechte
Joomla JVTwitter - SQL Injection & XSS Vulnerabilities
WordPress Plugin Simple File List 5.4 Arbitrary File Upload
Nagios XI 5.7.3 mibs.php Remote Command Injection (Authenticated)
WordPress Simple File List 5.4 Shell Upload
vBulletin bis 5.6.2 subWidgets Data widget_tabbedcontainer_tab_panel unbekannte Schwachstelle
Wp File Manager V6.9 - Remote Command Execution
Wordpress EZ-done File Manager 3.1.2 - Remote File Upload
osCommerce Phoenix CE bis 1.0.5.3 POST Parameter admin/mail.php erweiterte Rechte
osCommerce Phoenix CE bis 1.0.5.3 define_language.php Cross Site Request Forgery
NeoPost Mail Accounting Software Pro 5.0.6 FUS_SCM_BlockStart.php code Cross Site Scripting
Real Estate 7 WordPress theme v3.0.4 - Unauthenticated Reflected XSS
OneMall WordPress theme v1.7.7 - Unauthenticated Reflected XSS & XFS
Victor CMS 1.0 category.php cat_id SQL Injection
Sphider Search Engine 1.3.6 word_upper_bound RCE (Authenticated)
Sphider Search Engine 1.3.6 Remote Code Execution
WordPress Plugin Rest Google Maps < 7.11.18 SQL Injection
YOURLS Admin Panel bis 1.7.10 PHP Plugin Cross Site Scripting
FruityWifi bis 2.4 page_config_adv.php newSSID/hostapd_wpa_passphrase Cross Site Request Forgery
Simple Download Monitor bis 3.8.8 auf WordPress Scripting Cross Site Scripting
Eyoucms 1.2.7 login.php Cross Site Request Forgery
Tiki bis 21.1 Admin Password tiki-login.php schwache Authentisierung
TESTPHP - SQL Injection vulnerability
WordPress Colorbox Lightbox 1.1.1 Cross Site Scripting
WordPress HS Brand Logo Slider 2.1 Shell Upload
WordPress Rest Google Maps SQL Injection
rConfig bis 3.9.4 GET Request ajaxAddTemplate.php erweiterte Rechte
Testimonial Rotator Plugin 3.0.2 auf WordPress /wp-admin/post.php cite Cross Site Scripting
Magento bis 2.3.5p1/2.4.0 File Upload Cross Site Scripting
CS-Cart 1.3.3 Local File Inclusion
CS-Cart 1.3.3 Remote Code Execution
phpRedisAdmin bis 1.13.1 login.php username Cross Site Scripting
Joomla Component com_jsupport SQL Injection Vulnerability
vBulletin 5.6.3 Cross Site Scripting
phpMyAdmin bis 4.9.5/5.0.2 SearchController SQL Injection
phpMyAdmin bis 4.9.5/5.0.2 Transformation Feature Cross Site Scripting
laravel - Cross-site Scripting (Reflected)
PHP bis 7.2.33/7.3.22/7.4.10 HTTP Cookie Information Disclosure
PHP bis 7.2.33/7.3.22/7.4.10 AES-CCM openssl_encrypt() schwache Verschlüsselung
GetSimpleCMS 3.3.15 log.php Directory Traversal
WebsiteBaker 2.12.2 save.php display_name SQL Injection
CMS Made Simple 2.2.14 Content Manager Persistent Cross Site Scripting
WordPress WP Courses 2.0.29 Information Disclosure / Authorization Bypass
MobileFrontend Extension bis 1.34.3 auf MediaWiki parseHTML DOM-Based Cross Site Scripting
FileImporter Extension bis 1.34.3 auf MediaWiki Page Creation erweiterte Rechte
Observium Professional/Enterprise/Community 20.8.10631 device_entities.php device_id[] SQL Injection
Observium Professional/Enterprise/Community 20.8.10631 authenticate.inc.php username[0] SQL Injection
jdownloads 3.2.63 auf Joomla categories.php order filter_order SQL Injection
Observium Professional/Enterprise/Community 20.8.10631 pages/contacts.inc.php Cross Site Scripting
Visitor Management System In PHP 1.0 Cross Site Scripting
Visitor Management System In PHP 1.0 SQL Injection
Drupal bis 8.8.9/8.9.5/9.0.5 File Module erweiterte Rechte
Drupal bis 8.8.9/8.9.5/9.0.5 Experimental Workspaces erweiterte Rechte
Drupal bis 8.8.9/8.9.5/9.0.5 CKEditor Reflected Cross Site Scripting
Drupal bis 8.8.9/8.9.5/9.0.5 AJAX API Cross Site Scripting
Tiny RSS vor 2020-09-16 Error Message init.php $_REQUEST["url"] unbekannte Schwachstelle
D-Link DIR-816L/DIR-803 URL Encoding webinc/js/info.php Referer Header Cross Site Scripting
Mantis Bug Tracker 2.3.0 Remote Code Execution
ZoneMinder bis 1.34.20 download.php connkey Cross Site Scripting
Mida Solutions eFramework ajaxreq.php Command Injection
Sqreen PHP Agent Daemon bis 1.15.x Virtual Machine erweiterte Rechte
Joomla! paGO Commerce 2.5.9.0 SQL Injection
Mike Rooijackers Recall Products 0.8 auf WordPress Manufacturer[] SQL Injection
AccessPress Themes WP Floating Menu 1.3.0 auf WordPress id Cross Site Scripting
SoftradeWeb SNC WP SMART CRM 1.8.7 auf WordPress Cross Site Scripting
Mike Rooijackers Recall Products 0.8 auf WordPress admin.php Recall Settings Stored Cross Site Scripting
Wordpress file manager 6.7 - Remote Code Execution
Gazie 7.29 admin_utente.php Cross Site Scripting
Pligg 2.0.3 admin/admin_editor.php the_file Command erweiterte Rechte
WordPress bis 5.4.1 comment-template.php Comment Information Disclosure
French English Russian