3813 matches found
CVE-2017-5543
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request...
CVE-2017-5543
CVE-2017-5543 affects Subrion CMS 4.0.5 where a vulnerable PHP file, includes/classes/ia.core.users.php, allows remote attackers to perform PHP Object Injection via crafted serialized data in a salt cookie during login. Public references and CVSS indicate a high-severity impact (NVD lists base sc...
CVE-2017-5543
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request...
WordPress Restore Dropbox plugin <= 1.4.7 - PHP Object Injection Vulnerability
WordPress Restore Dropbox plugin allows a possible PHP Object Injection vulnerability in wpadmunpack function. Solution Update the plugin...
phpBB 2.0.23 - From Variable Tampering to SQL Injection
RIPS Analysis The forum phpBB2 consists of only 50,000 lines of code and RIPS took only 19 seconds for its in-depth security analysis to complete. It found various PHP object injection vulnerabilities which are less severe due to missing gadget chains. Further, many SQL injections are reported du...
WordPress Google Analytics Counter Tracker 3.1.5 PHP Object Injection
------------------------------------------------------------------------ Google Analytics Counter Tracker WordPress Plugin unauthenticed PHP Object injection vulnerability ------------------------------------------------------------------------ Remco Vermeulen, July 2016...
WordPress Google Analytics Counter Tracker Plugin <= 3.4.0 - PHP Object Injection
This plugin is prone to a PHP object injection vulnerability. It allows attackers to execute arbitrary PHP code. Solution Update the plugin...
WordPress Google Analytics Counter Tracker Plugin <= 3.4.0 - PHP Object Injection
This plugin is prone to a PHP object injection vulnerability. It allows attackers to execute arbitrary PHP code. Solution Update the plugin...
WordPress BP Profile Search Plugin <= 4.5.3 - PHP Object Injection
This plugin is prone to a PHP object injection vulnerability. Solution Update the plugin...
Zikula 'jcss.php' Directory Traversal Vulnerability
Zikula is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2016-9835
Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacker to launch a PHP object injection by uploading a serialized file...
CVE-2016-9835
Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacker to launch a PHP object injection by uploading a serialized file...
Directory traversal
Directory traversal vulnerability in file "jcss.php" in Zikula 1.3.x before 1.3.11 and 1.4.x before 1.4.4 on Windows allows a remote attacker to launch a PHP object injection by uploading a serialized file...
CVE-2016-9835
Summary (CVE-2016-9835) : Zikula’s jcss.php file has a directory traversal vulnerability in 1.3.x (before 1.3.11) and 1.4.x (before 1.4.4) on Windows, allowing a remote attacker to upload a serialized file to trigger a PHP object injection. Root cause is improper handling of uploaded content lead...
Ian Dunn: unchecked unserialize usage in WordPress-Functionality-Plugin-Skeleton/functionality-plugin-skeleton.php
in: https://github.com/iandunn/WordPress-Functionality-Plugin-Skeleton/blob/547216caf1bef2664ec3920a9c749191dea13aeb/functionality-plugin-skeleton.phpL108 there is usage of unserialize function public function blockpluginupdates $request, $url if 0 !== strpos $url, self::PLUGINUPDATECHECKURL //...
Relevanssi Premium <= 1.14.4 - SQL Injection & PHP Object Injection
The relevanssi-premium WordPress plugin was affected by a SQL Injection & PHP Object Injection security vulnerability...
WordPress Relevanssi Premium Plugin <= 1.14.4 - Multiple Vulnerabilities
This plugin is prone to a SQL injection and PHP object injection vulnerabilities. Solution Update the plugin...
Google Analytics Counter Tracker <= 3.4.0 - Unauthenticated PHP Object Injection
The Google Analytics Counter Tracker WordPress plugin was affected by an Unauthenticated PHP Object Injection security vulnerability...
WordPress YITH WooCommerce Compare 2.0.9 PHP Object Injection
------------------------------------------------------------------------ YITH WooCommerce Compare WordPress Plugin unauthenticated PHP Object injection vulnerability ------------------------------------------------------------------------ Yorick Koster, June 2016...