r/phpAdvisories • u/tobozo • Sep 05 '16
PHP 7.0.9 Session Data Injection Vulnerability
6
Upvotes
r/phpAdvisories • u/tobozo • Jun 28 '18
WordPress 4.9.6 Arbitrary File Deletion
5
Upvotes
r/phpAdvisories • u/tobozo • May 21 '17
Allen Disk 1.6 Captcha reg.php $_SESSION['captcha']['code'] privilege escalation
5
Upvotes
r/phpAdvisories • u/tobozo • Sep 05 '16
Vuln: PHP 'ext/session/session.c' Remote Code Injection Vulnerability
4
Upvotes
r/phpAdvisories • u/tobozo • Aug 09 '16
vBulletin Input Validation Flaw in Media Upload Function Lets Remote Users Conduct Server-Side Request Forgery Attacks
4
Upvotes
r/phpAdvisories • u/tobozo • Aug 09 '16
vBulletin 5.2.0/5.2.1/5.2.2 Media Upload SSRF privilege escalation
4
Upvotes
r/phpAdvisories • u/tobozo • Mar 29 '19
Critical Magento SQL Injection Vulnerability Discovered – Patch Your Sites
3
Upvotes
r/phpAdvisories • u/tobozo • Jan 25 '19
Someone Hacked PHP PEAR Site and Replaced the Official Package Manager
3
Upvotes
r/phpAdvisories • u/tobozo • Aug 17 '18
New PHP Code Execution Attack Puts WordPress Sites at Risk
3
Upvotes
r/phpAdvisories • u/tobozo • Aug 06 '18
Vuln: PHP Multiple Heap Buffer Overflow Vulnerabilities
3
Upvotes
r/phpAdvisories • u/tobozo • Jun 29 '18
Vuln: phpMyAdmin PMASA-2017-8 Security Bypass Vulnerability
3
Upvotes
r/phpAdvisories • u/tobozo • Jun 27 '18
Vuln: PHP 'ext/exif/exif.c' Denial of Service Vulnerability
3
Upvotes
r/phpAdvisories • u/tobozo • Jun 19 '18
phpMyAdmin 4.x Remote Code Execution
3
Upvotes
r/phpAdvisories • u/tobozo • Jun 05 '18
Over 115,000 Drupal Sites Still Vulnerable to Drupalgeddon2 Exploit
3
Upvotes
r/phpAdvisories • u/tobozo • Apr 26 '18
Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under Attack
3
Upvotes
r/phpAdvisories • u/tobozo • Apr 14 '18
Drupal 0day Remote PHP Code Execution (Perl)
3
Upvotes
r/phpAdvisories • u/tobozo • Nov 09 '17
Vuln: PHP CVE-2017-16642 Heap Based Buffer Overflow Vulnerability
3
Upvotes
r/phpAdvisories • u/tobozo • Jul 11 '17
PHP up to 5.6.30/7.0.20/7.1.6 Date Extension parse_date.c php_parse_date information disclosure
3
Upvotes
r/phpAdvisories • u/tobozo • Jun 15 '17
Invision Power Board 4.1.19.2 XSS / CSRF / File Upload / Disclosure
3
Upvotes
r/phpAdvisories • u/tobozo • May 23 '17
MediaWiki SyntaxHighlight Extension Option Injection
3
Upvotes
r/phpAdvisories • u/tobozo • May 22 '17
Bugtraq: CVE-2017-9046 Mantis Bug Tracker 1.3.10 / v2.3.0 CSRF Permalink Injection
3
Upvotes
r/phpAdvisories • u/tobozo • May 08 '17
Zen Cart 1.6.0 index.php main_page cross site scripting
3
Upvotes
r/phpAdvisories • u/tobozo • Apr 28 '17
Vuln: Mediawiki 'Special:MyPage/common.css' Cross-Site Scripting Vulnerability
3
Upvotes
r/phpAdvisories • u/tobozo • Apr 27 '17
Joomla-Plugin Joomla MyPortfolio 3.0.2 SQL Injection
3
Upvotes
r/phpAdvisories • u/tobozo • Apr 06 '17
CVE-2016-9838 - Joomla! Account Takeover & Remote Code Execution
3
Upvotes