PHP - CVE CyberSecurity Database News (Page 179)

Nov 27, 2022 API SQL Java PHP Linuxfoundation Opendaylight

CVE-2022-45932 - SQL Injection in OpenDaylight AAA - How It Works, Exploit Details, and In-Depth Explanation

If you're using OpenDaylight (ODL)—an open source platform popular for software-defined networking—you should pay attention to CVE-2022-45932. This vulnerability affects the

Nov 25, 2022 XSS Exploit PHP

CVE-2022-45225 - Exploiting XSS in Book Store Management System v1. — A Deep Dive

Cross-Site Scripting (XSS) is a classic web vulnerability that refuses to become irrelevant. In this post, we’ll analyze CVE-2022-45225, a nasty XSS bug in

Nov 25, 2022 XSS Microsoft Safari PHP Google Chrome nextcloud security-advisories

CVE-2022-39338 - How a Nextcloud user_oidc Discovery URL Bug Enabled XSS in Safari

Nextcloud is one of the most popular open-source self-hosted cloud services out there. Like many modern platforms, Nextcloud supports logging in with multiple identity providers

Nov 25, 2022 WiFi PHP nextcloud security-advisories

CVE-2022-39339 - How Plaintext OIDC Credential Leaks Put Nextcloud Accounts at Risk

user_oidc is a widely used OpenID Connect (OIDC) user backend for Nextcloud, enabling seamless SSO (Single Sign-On) integration with identity providers. On November 10,

Nov 25, 2022 PHP Moodle

CVE-2022-45152 - Blind SSRF in Moodle’s LTI Provider – Exploit Details, Impact, and Mitigation

A significant security vulnerability (CVE-2022-45152) was discovered in Moodle, the widely used open-source learning management system. This bug is a Blind Server-Side Request Forgery (SSRF)