PHP - CVE CyberSecurity Database News (Page 185)

Nov 23, 2022 Exploit SQL Java PHP xwiki xwiki-platform

CVE-2022-41932 - How a Simple Login Could Break XWiki Performance — Exploit Details and Patch Guide

Published: June 2024 What Is CVE-2022-41932? CVE-2022-41932 is a critical vulnerability found in the XWiki Platform, an open-source wiki system that many organizations use for

Nov 23, 2022 XSS Exploit PHP Eyoucms

CVE-2022-45280 - Exploiting XSS in EyouCMS v1.6. /login.php via the 'Url' Parameter

EyouCMS has become a popular content management system in recent years. Unfortunately, with popularity often comes increased scrutiny—and vulnerabilities. One such vulnerability, CVE-2022-45280, was

Nov 23, 2022 RCE Exploit PHP Dedebiz Dedecmsv6

CVE-2022-44118 - Remote Code Execution in dedecmdv6 v6.1.9 via file_manage_control.php

dedecmdv6 is a background management tool built for the DedeCMS content management system, widely used in China. In late 2022, a critical vulnerability—CVE-2022-44118—was

Nov 23, 2022 PHP

CVE-2022-45866 The qpress file editor before version 11.3 allows directory traversal via ../ in a .qp file.

Attackers can exploit this vulnerability to inject and execute arbitrary PHP code in the web server’s directory. Percona XtraBackup’s .qp file format is

Nov 23, 2022 RCE Exploit PHP Churchdb Churchinfo

CVE-2021-43258 - Remote Code Execution in ChurchInfo 1.3. – Simple Exploitation via CartView.php

In November 2021, a dangerous vulnerability was found and published (reference) in ChurchInfo version 1.3.. This open-source church management app allows users to manage