PHP - CVE CyberSecurity Database News (Page 176)

Nov 29, 2022 API SQL PHP owncast

CVE-2022-3751 - SQL Injection in owncast/owncast Before ..13 — How It Works and Exploit Details

In September 2022, a critical vulnerability (CVE-2022-3751) was reported in the Owncast open-source live streaming platform. If you’re unfamiliar, Owncast is

Nov 29, 2022 WordPress PHP simplepress Press – WordPress Forum Plugin

CVE-2022-4031 - Arbitrary File Modification in Simple:Press WordPress Plugin (Up to v6.8) — Explained & Exploited

WordPress is everywhere, and so are plugins that extend its functionality. But with great power comes… well, sometimes glaring vulnerabilities. CVE-2022-4031 hits close

Nov 29, 2022 WordPress PHP

CVE-2022-4033 - How Attackers Exploit Input Validation Bypass in WordPress Quiz and Survey Master Plugin (Up to v8..4)

WordPress powers millions of websites, so when a plugin has a security flaw, it can put many sites at risk. One such issue is CVE-

Nov 29, 2022 XSS Exploit PHP

CVE-2022-44279 - XSS Vulnerability in Garage Management System v1. Exploited via /garage/php_action/createBrand.php

Garage Management System (GMS) is a popular open-source software used by many small auto repair shops to manage daily operations. In late 2022, CVE-

Nov 29, 2022 Exploit PHP Contec

CVE-2022-44354 - How SolarView Compact 4. and 5.’s Unrestricted File Upload Bug Can Be Exploited

SolarView Compact is a popular solar power monitoring platform, often found in smart buildings and renewable installations. In 2022, a dangerous vulnerability (CVE-2022-44354)