PHP - CVE CyberSecurity Database News (Page 125)

Oct 19, 2023 RCE Windows Exploit PHP SolarWinds Access Rights Manager

CVE-2023-35187 - How a Directory Traversal in SolarWinds Access Rights Manager Led to Full Remote Code Execution

In June 2023, security researchers discovered a critical vulnerability, CVE-2023-35187, in the popular enterprise software SolarWinds Access Rights Manager (ARM). The flaw, caused

Oct 19, 2023 RCE WordPress PHP quantumcloud AI ChatBot

CVE-2023-5241 - How A Simple Directory Traversal Vulnerability in AI ChatBot for WordPress Could Break Your Site

WordPress plugins are a goldmine for hackers, especially when it comes to plugins that handle file uploads or manipulation. One recent, under-the-radar example

Oct 17, 2023 CSRF Exploit PHP

CVE-2023-45902 - Exploiting CSRF in Dreamer CMS v4.1.3 via /admin/attachment/delete

> Note: This article is meant for educational and defensive cybersecurity purposes only. Abusing these vulnerabilities is illegal and unethical. What is Dreamer CMS? Dreamer

Oct 17, 2023 CSRF PHP

CVE-2023-45906 - CSRF Attack in Dreamer CMS v4.1.3 — How the /admin/user/add Route Opens the Door

Dreamer CMS is an open-source content management system used by small businesses and developers for fast website deployment. In November 2023, a significant security

Oct 17, 2023 CSRF Exploit PHP

CVE-2023-45907 - How a CSRF Vulnerability in Dreamer CMS v4.1.3 Puts Your Site Variables at Risk

In late 2023, security researchers uncovered a Cross-Site Request Forgery (CSRF) vulnerability in Dreamer CMS v4.1.3. This flaw, registered as CVE-2023-