Wordpress XXE Vulnerability

WordPress is a blogging platform developed using the PHP language. Users can set up their own websites on servers that support PHP and MySQL databases, or use WordPress as a content management system CMS. A XXE vulnerability exists in Wordpress versions 5.6 - 5.7. The vulnerability stems from an...

Rgcms 2.0-build2021040501 has a file upload vulnerability

Rgcms is an open source building management system, written in PHP language, the system features free, extended, extremely safe, free and open source. Rgcms 2.0-build2021040501 file upload vulnerability , an attacker can use the vulnerability to obtain control of the server...

The vulnerability of the openssl_encrypt() function in the PHP programming language allows a perpetrator to gain access to confidential data and compromise its integrity.

The vulnerability of the opensslencrypt function in the PHP programming language is related to weak encryption methods. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...

Joomla! Template Manager Missing Input Validation Vulnerability

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A vulnerability exists in Joomla! 3.2.0 - 3.9.24 where the template manager lacks...

Joomla! cross-site scripting vulnerability (CNVD-2021-15050)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site scripting vulnerability exists in Joomla! 2.5.0 - 3.9.24. The...

Joomla! path traversal vulnerability (CNVD-2021-16936)

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A path traversal vulnerability exists in Joomla! 3.0.0 - 3.9.24. An attacker can...

GLPI Cross-Site Scripting Vulnerability (CNVD-2021-17778)

GLPI is an open source software for IT equipment management, developed using the PHP language. A cross-site scripting vulnerability exists in GLPI versions prior to 9.5.4 when a logged-in user is updating a work order, and no detailed vulnerability details are available at this time...

HcCMS suffers from SQL injection vulnerability (CNVD-2021-17282)

HcCms is a free website building system developed in php language. Developed using the widely popular PHP MYSQL. HcCMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

UBUNTU-CVE-2021-21702

In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash...

RGCMS suffers from a file upload vulnerability (CNVD-2021-03290)

RGCMS RuiGu content management system is a set of open source building management system , using PHP language , written in the framework of Thinkphp5.1. , the database using MYSQL database . RGCMS file upload vulnerability , an attacker can use this vulnerability to obtain control of the server...

CVE-2021-3007

Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the destruct method of the Zend\Http\Response\Stream class in Stream.php. NOTE: Zend Framework is no longer...

Deserialization of untrusted data

DISPUTED Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the destruct method of the Zend\Http\Response\Stream class in Stream.php. NOTE: Zend Framework is no...

CVE-2021-3007

Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the destruct method of the Zend\Http\Response\Stream class in Stream.php. NOTE: Zend Framework is no longer...

CVE-2021-3007

Laminas-http

The vulnerability of the urldecode() function in the PHP programming language, related to reading beyond the allowable buffer data limits, allows attackers to gain access to protected information.

The vulnerability of the urldecode function in the PHP programming language is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to gain access to protected information...

Pluck Code Issue Vulnerability

Pluck is a Content Management System CMS developed in PHP. A code issue exists in Pluck CMS versions prior to 4.7.13, which stems from a file upload limit bypass vulnerability that allows a privileged administrator user to access the host computer via the "Manage Files" feature, which could lead ...

Command execution vulnerability exists in MyuCMS (CNVD-2020-67559)

MyuCMS front-end is built with UIkit framework, back-end is built with layui back-end framework and back-end is developed with PHP+MYSQL. A command execution vulnerability exists in MyuCMS, which can be exploited to gain server privileges...

penetration

This repository contains a collection of 0-day exploits for various web applications, including CMS platforms. The exploits are categorized by the affected application, and each category contains multiple exploits. The exploits are written in various programming languages, including PHP, Python,...

SQL Injection Vulnerability in UCMS v1.4.8

UCMS is a content management system written in PHP. UCMS v1.4.8 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

php: Out of bounds read when parsing EXIF information

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exifreaddata function, in PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information disclosure o...