PHP - CVE CyberSecurity Database News (Page 277)

Jan 25, 2022 API Exploit SQL PHP

CVE-2022-0332 - SQL Injection Vulnerability in Moodle’s H5P Activity Web Service (Exclusive Exploit Analysis)

Moodle is one of the world’s most popular open-source learning management systems, used by universities, schools, and businesses around the globe. In early 2022,

Jan 21, 2022 XSS Exploit PHP

CVE-2022-0323 - How a Template Engine Bug in mustache/mustache Opened the Door to Attacks

In January 2022, a security vulnerability—now identified as CVE-2022-0323—was discovered in the popular PHP template engine, mustache/mustache. This vulnerability, rated as “Improper

Jan 18, 2022 WordPress PHP

CVE-2022-0236 - How a Vulnerability in WP Import Export Exposed Sensitive Data on WordPress Sites

If you run a WordPress site and use plugins for moving data around, you’ve probably heard of the popular WP Import Export plugin. Maybe

Jan 14, 2022 Exploit PHP

CVE-2022-23227 - Exploiting NUUO NVRmini2 for User Injection and Remote Code Execution

CVE-2022-23227 is a critical vulnerability in the NUUO NVRmini2 network video recorder. This flaw allows an attacker, without logging in, to upload specially-crafted files and

Jan 13, 2022 Exploit PHP

CVE-2022-23134 - How Unauthenticated Attackers Can Hack Your Zabbix Setup Through setup.php

In early 2022, security researchers discovered a critical flaw in the Zabbix monitoring platform. The vulnerability, tracked as CVE-2022-23134, allows unauthenticated attackers to bypass key