52 matches found
CVE-2026-40457 Reflected XSS in LMS
A Reflected Cross-Site Scripting XSS vulnerability exists in LMS LAN Management System before commit 9c5651b in the "dbrecover.php" and "netremap.php" modules where unsanitized GET parameters are directly embedded into HTML output. This allows an attacker to inject arbitrary JavaScript when an...
CVE-2018-25421 Open STA Manager 2.3 Arbitrary File Download via Path Traversal
Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter. Attackers can send GET requests to modules/backup/actions.php with op=getfile and traverse directories using ../ sequences to access sensiti...
CLSA-2026-1778240943 php: Fix of CVE-2025-1219
CVE-2025-1219: fix wrong content-type header on libxml streams redirect...
MiracleLinux 4 : rh-php56-php-5.6.5-8.AXS4 (AXSA:2016-144:01)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-144:01 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers...
MiracleLinux 3 : php-5.1.6-45.0.1.AXS3 (AXSA:2014-794:03)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-794:03 advisory. Description : PHP is an HTML-embedded scripting language that allows developers to write dynamically generated web pages. PHP is ideal for writing...
MiracleLinux 4 : rh-php56-php-5.6.5-9.AXS4 (AXSA:2016-622:02)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-622:02 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in...
MiracleLinux 7 : rh-php56-php-5.6.5-7.el7 (AXSA:2016-130:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-130:01 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers...
CVE-2025-41737
Due to webserver misconfiguration an unauthenticated remote attacker is able to read the source of php modules...
CVE-2025-41734
CVE-2025-41734 affects METZ CONNECT EWIO2-M and EWIO2-BM devices. Public sources corroborate unauthenticated remote attackers can execute arbitrary PHP files and gain full control of affected devices through web/server flaws, enabling remote code execution and complete device compromise. The comm...
CVE-2025-41734 Unauthenticated Local File Inclusion in php module
An unauthenticated remote attacker can execute arbitrary php files and gain full access of the affected devices...
CVE-2025-41734 Unauthenticated Local File Inclusion in php module
An unauthenticated remote attacker can execute arbitrary php files and gain full access of the affected devices...
EUVD-2006-5342
Malware in sbrugna...
EUVD-2012-2073
Malware in sbrugna...
EUVD-2019-7768
Malware in sbrugna...
EUVD-2006-5890
Malware in sbrugna...
EUVD-2005-4864
Malware in sbrugna...
new module: php:8.2
An update is available for php-pecl-zip, module.php-pecl-apcu, php-pecl-xdebug3, module.php-pecl-xdebug3, php-pecl-rrd, module.php-pecl-rrd, module.php-pecl-zip, php-pecl-apcu. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...
OESA-2025-1303 php security update
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
OESA-2024-2062 php security update
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
