CVE-2021-41268

Symfony/SecurityBundle is the security system for Symfony, a PHP framework for web and console applications and a set of reusable PHP components. Since the rework of the Remember me cookie in version 5.3.0, the cookie is not invalidated when the user changes their password. Attackers can therefor...

Multiple SQL Injection Vulnerabilities in Redaxscript 'includes/password.php'

RedAxScript is a free content management system. Multiple SQL injection vulnerabilities exist in Redaxscript version 0.3.2 includes/password.php. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands by passing the id or password parameter to the passwordreset program...