PHP - CVE CyberSecurity Database News (Page 115)

Dec 7, 2023 API Exploit PHP Paytm Paytm Payment Gateway

CVE-2022-45362 - Server-Side Request Forgery (SSRF) in Paytm Payment Gateway Explained

CVE-2022-45362 is a severe Server-Side Request Forgery (SSRF) vulnerability that was discovered in the Paytm Payment Gateway, affecting versions from N/A

Dec 5, 2023 Microsoft API Exploit Apache PHP microsoftgraph msgraph-sdk-php-core

CVE-2023-49283 - How a Simple Test File in Microsoft Graph Core PHP SDK Could Leak Your Secrets

On January 12, 2024, a security flaw with the identifier CVE-2023-49283 was made public, highlighting a critical threat lying dormant in the Microsoft

Nov 30, 2023 XSS WordPress PHP Elementor.com Elementor

CVE-2023-47505 - Cross-site Scripting (XSS) Vulnerability in Elementor (n/a–3.16.4) — Full Walkthrough and Exploitation Guide

Elementor is one of the most popular WordPress page builder plugins, powering millions of websites worldwide. In late 2023, a major security flaw was discovered

Nov 28, 2023 Exploit PHP Chamilo

CVE-2023-3368 - Remote Command Injection in Chamilo LMS `/main/webservices/additional_webservices.php` (Bypass of CVE-2023-34960)

Chamilo LMS is a popular, open-source learning management system (LMS) used by educational institutions worldwide. In June 2023, a severe security flaw—CVE-2023-

Nov 23, 2023 XSS WordPress PHP Jeroen Schmit Theater for WordPress

CVE-2023-47833 - Exploiting XSS in Jeroen Schmit Theater for WordPress (Plugin <= .18.3)

CVE-2023-47833 marks a critical security vulnerability in the popular WordPress plugin "Theater," developed by Jeroen Schmit. This plugin, often used by