PT-2023-2474 · Php +10 · Php +10

Name of the Vulnerable Software and Affected Versions: PHP versions 8.0.0 through 8.0.27 PHP versions 8.1.0 through 8.1.15 PHP versions 8.2.0 through 8.2.2 Description: The issue is related to the core path resolution function in PHP, which allocates a buffer one byte too small. When resolving...

PT-2023-2473 · Php +10 · Php +10

Name of the Vulnerable Software and Affected Versions: PHP versions 8.0.0 through 8.0.27 PHP versions 8.1.0 through 8.1.15 PHP versions 8.2.0 through 8.2.2 Description: The issue is related to an excessive number of parts in HTTP form upload, which can cause high resource consumption and excessiv...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : PHP vulnerability (USN-5818-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5818-1 advisory. It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute...

PT-2023-10619 · Unknown · Jfm-So Piwallet

Name of the Vulnerable Software and Affected Versions: jfm-so piWallet affected versions not specified Description: A critical issue affects some unknown functionality of the file api.php. The manipulation of the key argument leads to sql injection. Recommendations: Apply a patch to fix this issu...

CVE-2021-4310 01-Scripts 01-Artikelsystem 01article.php cross site scripting

A vulnerability was found in 01-Scripts 01-Artikelsystem. It has been classified as problematic. Affected is an unknown function of the file 01article.php. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. It is possible to launch the attack remotely. The patch is...

Slackware Linux 15.0 / current php Vulnerability (SSA:2023-006-02)

The version of php installed on the remote host is prior to 7.4.33 / 8.0.27 / 8.1.14. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-006-02 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

PT-2023-9407 · Php +10 · Php +10

Name of the Vulnerable Software and Affected Versions: PHP versions 8.0.0 through 8.0.27 PHP versions 8.1.0 through 8.1.15 PHP versions 8.2.0 through 8.2.2 Description: The issue is related to the password verification function in PHP, which may accept some invalid Blowfish hashes as valid. If su...

PT-2022-25427 · WordPress · Inpost Gallery

Name of the Vulnerable Software and Affected Versions: InPost Gallery WordPress plugin version 2.1.4 and earlier Description: The issue arises from the insecure use of PHP's extract function when rendering HTML views, allowing attackers to force the inclusion of malicious files and URLs. This cou...

CVE-2022-4446 PHP Remote File Inclusion in tsolucio/corebos

PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0...

Auto/Taxi Stand Management System 跨站脚本漏洞

Auto/Taxi Stand Management System is a Taxi Stand Management System by the individual developer Anuj Kumar. A security vulnerability exists in Auto/Taxi Stand Management System v1.0, which was discovered to contain a cross-site scripting XSS vulnerability via the component search.php...

Sanitization Management System 跨站脚本漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A security vulnerability exists in Sanitization Management System version v1.0.0. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially...

GLSA-202211-03 : PHP: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202211-03 PHP: Multiple Vulnerabilities - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress quines gzip files, resulting in an infinite loop. CVE-2022-31628 - In PHP versions...

SUSE SLED15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2022:3997-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3997-1 advisory. - Version update to 7.4.33: - CVE-2022-31630: Fixed out-of-bounds read due to insufficient input...

php: Use after free due to php_filter_float() failing for ints

A flaw was found in PHP. The vulnerability occurs due to the malformed phpfilterfloat function and leads to a use-after-free vulnerability. This flaw allows an attacker to inject a malicious file, leading to a crash or a Segmentation fault...

WordPress Plugin Themepoints Testimonials Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Themepoints Testimonials, which stems from a lack of effective filtering and...

WordPress Plugin ExpressTech Quiz And Survey Master Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin ExpressTech Quiz And Survey Master has a cross-site scripting vulnerability, the vulnerability stems from the lack of effective...

Barangay Management System SQL注入漏洞

Barangay Management System is a database driven system. A SQL injection vulnerability exists in Barangay Management System version 1.0, which stems from the hiddenid parameter of /clearance/clearance.php being susceptible to SQL injection...

The vulnerability of the index.php implementation in the Metinfo CMS system allows a perpetrator to execute arbitrary SQL code.

The vulnerability of the index.php script implementation in the Metinfo CMS system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

CVE-2022-31628

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop...

PHP 安全漏洞

PHP is a scripting language that executes on the server side. A security vulnerability exists in PHP versions prior to 7.4.31, 8.0.24, and 8.1.11, which can be exploited by an attacker to be able to set a standard insecure cookie in a victim's browser...