PHP - CVE CyberSecurity Database News (Page 160)

May 2, 2023 WordPress Exploit PHP Advanced Custom Fields (ACF)

CVE-2023-1196 - Breaking Down the PHP Object Injection in ACF Plugins for WordPress (Exploit, Explanation & Code Example)

WordPress powers over 40% of the web, making plugins like Advanced Custom Fields (ACF) extremely popular for site customization. But with popularity comes attention from

Apr 26, 2023 RCE Exploit Apache PHP Drupal Core

CVE-2022-25277 - Dangerous File Upload Exploit in Drupal Core – How Insecure Filename Handling Led to Remote Code Execution

Drupal, a popular open-source content management system (CMS), is trusted by major organizations and governments due to its flexibility and robust security frameworks. However,

Apr 25, 2023 Exploit SQL PHP PrestaShop

CVE-2023-30839 - Critical PrestaShop SQL Filtering Vulnerability Explained [Exclusive Long Read]

If you run an online store using PrestaShop, this is one security update you can't afford to miss. Let's break down

Apr 24, 2023 RCE Java PHP Debian

CVE-2023-28484 - Exploiting a NULL Pointer Dereference in libxml2's XSD Schema Handling

CVE-2023-28484 is a security vulnerability in libxml2, a widely used C library for parsing XML documents. In versions before 2.10.4, parsing

Apr 24, 2023 Exploit PHP Debian

CVE-2023-29469 - How a Libxml2 Hashing Bug Exposes Logic and Memory Errors (with Exploit Details)

In early 2023, security researchers discovered CVE-2023-29469, a vulnerability in libxml2, one of the world’s most popular XML parsing libraries (used by