PHP - CVE CyberSecurity Database News (Page 279)

Jan 10, 2022 RCE Exploit PHP

CVE-2022-22822 - Breaking Down the Integer Overflow in Expat’s `addBinding` Function

Expat, known formally as the Expat XML parser (libexpat), is a core library that helps many applications process XML data. It’s used everywhere—from

Jan 6, 2022 WordPress PHP

CVE-2022-21663 - How a WordPress Multisite Object Injection Vulnerability Could Threaten Your Sites

WordPress is one of the most popular content management systems (CMS) in the world. Many companies and organizations use it to create and manage their

Jan 6, 2022 XSS WordPress Exploit PHP

CVE-2022-21662 - How Low-Privileged WordPress Users Can Hack Admins with Stored XSS

WordPress is one of the most popular website platforms in the world. It powers over 40% of all websites! That’s a lot of blogs,

Jan 6, 2022 WordPress API Exploit SQL PHP

CVE-2022-21664 - SQL Injection Vulnerability in WordPress – Detailed Exploration and Exploit

WordPress is the world’s most popular free and open-source content management system (CMS), built with PHP and using MariaDB (or MySQL) as its database.

Jan 4, 2022 Exploit SQL PHP

CVE-2022-21647 - Deserialization Attack in CodeIgniter's `old()` Function — How Hackers Turned Old Inputs into Arbitrary Code Execution (with SQL Injection)

CodeIgniter, a popular PHP framework used to build web applications quickly and securely, made headlines in 2022 with the exposure of a dangerous deserialization flaw.