PHP Security

Ubuntu Security Notice USN-6757-2

PHP Files ≈ Packet Storm May 3, 2024 | 14:34 pm

Ubuntu Security Notice 6757-2 - USN-6757-1 fixed vulnerabilities in PHP. Unfortunately these fixes were incomplete for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.10. This update fixes the problem. It was discovered that PHP incorrectly handled PHP_CLI_SERVER_WORKERS variable. An[…]

SOPlanning 1.52.00 SQL Injection

PHP Files ≈ Packet Storm May 3, 2024 | 14:31 pm

SOPlanning version 1.52.00 suffers from a remote SQL injection vulnerability in projects.php.

SOPlanning 1.52.00 Cross Site Request Forgery

PHP Files ≈ Packet Storm May 3, 2024 | 14:30 pm

SOPlanning version 1.52.00 suffers from a cross site request forgery vulnerability in xajax_server.php.

SOPlanning 1.52.00 Cross Site Scripting

PHP Files ≈ Packet Storm May 3, 2024 | 14:28 pm

SOPlanning version 1.52.00 suffers from a cross site scripting vulnerability in groupe_save.php.

Ubuntu Security Notice USN-6757-1

PHP Files ≈ Packet Storm Apr 30, 2024 | 15:52 pm

Ubuntu Security Notice 6757-1 - It was discovered that PHP incorrectly handled PHP_CLI_SERVER_WORKERS variable. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.[…]

LRMS PHP 1.0 SQL Injection / Shell Upload

PHP Files ≈ Packet Storm Apr 22, 2024 | 23:02 pm

LRMS PHP version 1.0 suffers from remote shell upload and multiple remote SQL injection vulnerabilities.

Debian Security Advisory 5661-1

PHP Files ≈ Packet Storm Apr 16, 2024 | 14:12 pm

Debian Linux Security Advisory 5661-1 - Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in secure cookie bypass, XXE attacks or incorrect validation of password hashes.

Debian Security Advisory 5660-1

PHP Files ≈ Packet Storm Apr 16, 2024 | 14:10 pm

Debian Linux Security Advisory 5660-1 - Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in secure cookie bypass, XXE attacks or incorrect validation of password hashes.

GUnet OpenEclass E-learning 3.15 File Upload / Command Execution

PHP Files ≈ Packet Storm Apr 11, 2024 | 14:04 pm

GUnet OpenEclass E-learning platform version 3.15 suffers from an unrestricted file upload vulnerability in certbadge.php that allows for remote command execution.

Invision Community 4.7.16 Remote Code Execution

PHP Files ≈ Packet Storm Apr 8, 2024 | 14:08 pm

Invision Community versions 4.7.16 and below suffer from a remote code execution vulnerability in toolbar.php.

Invision Community 4.7.15 SQL Injection

PHP Files ≈ Packet Storm Apr 8, 2024 | 14:06 pm

Invision Community versions 4.4.0 through 4.7.15 suffer from a remote SQL injection vulnerability in store.php.

DerbyNet 9.0 racer-results.php Cross Site Scripting

PHP Files ≈ Packet Storm Apr 5, 2024 | 18:14 pm

DerbyNet version 9.0 suffers from a cross site scripting vulnerability in racer-results.php.

DerbyNet 9.0 photo-thumbs.php Cross Site Scripting

PHP Files ≈ Packet Storm Apr 5, 2024 | 18:11 pm

DerbyNet version 9.0 suffers from a cross site scripting vulnerability in photo-thumbs.php.

DerbyNet 9.0 checkin.php Cross Site Scripting

PHP Files ≈ Packet Storm Apr 5, 2024 | 18:10 pm

DerbyNet version 9.0 suffers from a cross site scripting vulnerability in checkin.php.

DerbyNet 9.0 photo.php Cross Site Scripting

PHP Files ≈ Packet Storm Apr 5, 2024 | 18:09 pm

DerbyNet version 9.0 suffers from a cross site scripting vulnerability in photo.php.

DerbyNet 9.0 render-document.php Cross Site Scripting

PHP Files ≈ Packet Storm Apr 5, 2024 | 18:07 pm

DerbyNet version 9.0 suffers from a cross site scripting vulnerability in render-document.php.

Gibbon School Platform 26.0.00 Remote Code Execution

PHP Files ≈ Packet Storm Apr 5, 2024 | 17:58 pm

A remote code execution vulnerability in Gibbon online school platform version 26.0.00 and lower allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the endpoint /modules/System%20Admin/import_run.php&type=externalAssessment&step=4. As it allows remote code execution, adversaries[…]

Ubuntu Security Notice USN-6720-1

PHP Files ≈ Packet Storm Apr 2, 2024 | 18:52 pm

Ubuntu Security Notice 6720-1 - Kentaro Kawane discovered that Cacti incorrectly handled user provided input sent through request parameters to the graph_view.php script. A remote authenticated attacker could use this issue to perform SQL injection attacks.

Online Hotel Booking In PHP 1.0 SQL Injection

PHP Files ≈ Packet Storm Apr 2, 2024 | 18:33 pm

Online Hotel Booking in PHP version 1.0 suffers from a remote blind SQL injection vulnerability.

LMS PHP 1.0 SQL Injection

PHP Files ≈ Packet Storm Mar 28, 2024 | 14:18 pm

LMS PHP version 1.0 suffers from a remote SQL injection vulnerability.

WordPress Bricks Builder Theme 1.9.6 Remote Code Execution

PHP Files ≈ Packet Storm Mar 27, 2024 | 14:49 pm

This Metasploit module exploits an unauthenticated remote code execution vulnerability in the Bricks Builder Theme versions 1.9.6 and below for WordPress. The vulnerability allows attackers to execute arbitrary PHP code by leveraging a nonce leakage to bypass authentication and exploit[…]

Artica Proxy Unauthenticated PHP Deserialization

PHP Files ≈ Packet Storm Mar 27, 2024 | 14:48 pm

A command injection vulnerability in Artica Proxy appliance versions 4.50 and 4.40 allows remote attackers to run arbitrary commands via an unauthenticated HTTP request. The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and[…]

Insurance Management System PHP And MySQL 1.0 Cross Site Scripting

PHP Files ≈ Packet Storm Mar 26, 2024 | 14:22 pm

Insurance Management System PHP and MySQL version 1.0 suffers from multiple persistent cross site scripting vulnerabilities.

Debian Security Advisory 5642-1

PHP Files ≈ Packet Storm Mar 21, 2024 | 14:29 pm

Debian Linux Security Advisory 5642-1 - Three security issues were discovered in php-svg-lib, a PHP library to read, parse and export to PDF SVG files, which could result in denial of service, restriction bypass or the execution of arbitrary code.

Beitrag teilen

Das Neueste von Support

Ähnliche Artikel