PT-2022-25427 · WordPress · Inpost Gallery

Name of the Vulnerable Software and Affected Versions: InPost Gallery WordPress plugin version 2.1.4 and earlier Description: The issue arises from the insecure use of PHP's extract function when rendering HTML views, allowing attackers to force the inclusion of malicious files and URLs. This cou...

CVE-2022-4446 PHP Remote File Inclusion in tsolucio/corebos

PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0...

Auto/Taxi Stand Management System 跨站脚本漏洞

Auto/Taxi Stand Management System is a Taxi Stand Management System by the individual developer Anuj Kumar. A security vulnerability exists in Auto/Taxi Stand Management System v1.0, which was discovered to contain a cross-site scripting XSS vulnerability via the component search.php...

Sanitization Management System 跨站脚本漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A security vulnerability exists in Sanitization Management System version v1.0.0. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially...

GLSA-202211-03 : PHP: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202211-03 PHP: Multiple Vulnerabilities - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress quines gzip files, resulting in an infinite loop. CVE-2022-31628 - In PHP versions...

SUSE SLED15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2022:3997-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3997-1 advisory. - Version update to 7.4.33: - CVE-2022-31630: Fixed out-of-bounds read due to insufficient input...

php: Use after free due to php_filter_float() failing for ints

A flaw was found in PHP. The vulnerability occurs due to the malformed phpfilterfloat function and leads to a use-after-free vulnerability. This flaw allows an attacker to inject a malicious file, leading to a crash or a Segmentation fault...

WordPress Plugin Themepoints Testimonials Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Themepoints Testimonials, which stems from a lack of effective filtering and...

WordPress Plugin ExpressTech Quiz And Survey Master Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin ExpressTech Quiz And Survey Master has a cross-site scripting vulnerability, the vulnerability stems from the lack of effective...

Barangay Management System SQL注入漏洞

Barangay Management System is a database driven system. A SQL injection vulnerability exists in Barangay Management System version 1.0, which stems from the hiddenid parameter of /clearance/clearance.php being susceptible to SQL injection...

The vulnerability of the index.php implementation in the Metinfo CMS system allows a perpetrator to execute arbitrary SQL code.

The vulnerability of the index.php script implementation in the Metinfo CMS system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

CVE-2022-31628

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop...

PHP 安全漏洞

PHP is a scripting language that executes on the server side. A security vulnerability exists in PHP versions prior to 7.4.31, 8.0.24, and 8.1.11, which can be exploited by an attacker to be able to set a standard insecure cookie in a victim's browser...

Code injection

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection...

PT-2022-37259 · Php · Php

Name of the Vulnerable Software and Affected Versions: PHP affected versions not specified Description: A heap-use-after-free READ 10 crash has been identified. The crash occurs in the following functions: user wrapper opendir, php stream opendir, and php do opendir. Recommendations: At the momen...

CVE-2022-2677

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument username with the input ' AND SELECT 4955 FROM SELECTSLEEP5RSzF AND 'htiy'='htiy leads to s...

Oracle Linux 9 : php (ELSA-2022-5904)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-5904 advisory. 8.0.13-2 - fix password of excessive length triggers buffer overflow leading to RCE CVE-2022-31626 Tenable has extracted the preceding description block directl...

USN-5530-1: PHP vulnerability

It was discovered that PHP incorrectly handled certain memory operations when obtaining file information. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code...

Ubuntu 22.04 LTS : PHP vulnerability (USN-5530-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5530-1 advisory. It was discovered that PHP incorrectly handled certain memory operations when obtaining file information. A remote attacker could use this issue to cause PHP to...

CVE-2017-20126

A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. It is possible to initiate the attack remotely...