113782 matches found
CVE-2026-58256 GRR vulnerable to Remote Code Execution Via PHP Code Injection
GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can inject malicious PHP through LDAP connector configuration parameters such as ldapfilter, poisoning /personnalisation/configldap.inc.php and permitting remote code...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php-scare-counted Verification artifacts for "The PHP scare...
CloudPeler
CrimeFlare is back again! This tools can help you to see the real IP behind CloudFlare protected websites Donation for project development Introduction This tool serves to find the original IP behind websites that have been protected by CloudFlare, the information generated can be useful for...
SVG-Sanitizer
SVG Sanitizer Whitelist-based PHP SVG sanitizer. Usage load"evil.svg"; // sanitize! $svg-sanitize; // Print out sanitized SVG echo $svg-saveSVG; ? License MIT...
CVE-2026-77647
CVE-2026-77647 SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code 🔴 CVE-2026-77647 — SPIP Unauthenticated Remote Code Execution Pre-Authentication Remote Code Execution in SPIP CMS — All Versions Before 4.4.20 📋 Overview CVE-2026-77647 is a critical unauthenticat...
[SECURITY] [DSA 6589-1] php-mongodb security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6589-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 27, 2026 https://www.debian.org/security/faq -...
CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch
The US Cybersecurity and Infrastructure Security Agency CISA added two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, to its…...
CVE-2026-117515
A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impacted is an unknown function of the file traceapplication.php. The manipulation of the argument Search results in sql injection. It is possible to launch the attack remotely. The...
CVE-2026-117516
A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contactinsert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection. The attack can be...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP php2shell CVE-2026-109618 / CVE-2026-109619 Detection and...
CVE-2026-117516 oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection
A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contactinsert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection. The attack can be...
EUVD-2026-111238
A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contactinsert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection. The attack can be...
CVE-2026-117516 oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection
A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contactinsert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection. The attack can be...
CVE-2026-117516 oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection
A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contactinsert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/topic/phone/comments causes sql injection. The attack can be...
CVE-2026-117516
A SQL injection vulnerability exists in the Contact Form Handler component of the oretnom23 php-travel-agency-system software. The flaw is located within an unknown function of the contact_insert.php file, where improper handling of the name , company , email , topic , phone , and comments argume...
CVE-2026-117514
A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customerdetail.php of the component Admin Record Pages. The manipulation of the argument costomerid/ticketid/empid/salaryid/pageid leads to sql injection. It is...
CVE-2026-117513
A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customersearch.php of the component Admin Search Pages. Executing a manipulation of the argument customername/voucherno/empname can lead to sql injection. The attack may...
CVE-2026-117512
A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employeeinsert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made...
CVE-2026-117515 oretnom23 php-travel-agency-system traceapplication.php sql injection
A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impacted is an unknown function of the file traceapplication.php. The manipulation of the argument Search results in sql injection. It is possible to launch the attack remotely. The...
CVE-2026-117515
A security flaw in oretnom23 php-travel-agency-system (commit 4e28b8f84d72420373dd15c3ae32900beb7e0635) allows for SQL injection via an unknown function in the traceapplication.php file. The vulnerability is triggered by manipulating the Search argument, and the attack can be launched remotely . ...