1142 matches found
GO-2026-4486 FrankenPHP's unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FrankenPHP in github.com/dunglas/frankenphp
FrankenPHP's unicode case-folding length expansion causes incorrect splitpath index SCRIPTNAME/PATHINFO confusion in FrankenPHP in github.com/dunglas/frankenphp...
CVE-2019-20515
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the addresses/ URI...
CVE-2019-20521
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/ URI...
CVE-2019-20516
ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the blog/ URI...
CVE-2019-16657
TuziCMS 2.0.6 has XSS via the PATHINFO to a group URI, as demonstrated by index.php/article/group/id/2/...
CVE-2025-13623: Improper Neutralization of Input During Web Page Generation
The Twitscription plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATHINFO in all versions up to, and including, 0.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2025-64500: Use of Non-Canonical URL Paths for Authorization Decisions
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundation component defines an object-oriented layer for the HTTP specification. Starting in version 2.0.0 and prior to version 5.4.50, 6.4.29, and 7.3.7, the Request class improperly...
EUVD-2009-0474
Malware in sbrugna...
EUVD-2011-3819
Malware in sbrugna...
EUVD-2017-9070
Malware in sbrugna...
EUVD-2017-7963
Malware in sbrugna...
EUVD-2020-4281
Malware in sbrugna...
EUVD-2006-1145
Malware in sbrugna...
EUVD-2007-4465
Malware in sbrugna...
EUVD-2007-3251
Malware in sbrugna...
EUVD-2007-0248
Malware in sbrugna...
EUVD-2007-0142
Malware in sbrugna...
EUVD-2010-2272
Malware in sbrugna...