PHP - CVE CyberSecurity Database News (Page 91)

Feb 28, 2024 API Exploit SQL PHP

CVE-2024-26559 - How a Simple Bug in uverif 2. Leaks Your Secrets

In February 2024, a concerning vulnerability shook the users of uverif v2. – a popular user verification tool adopted by several web platforms. The flaw – identified

Feb 28, 2024 XSS Exploit PHP SourceCodester Online Job Portal

CVE-2024-1972 - Exploiting XSS in SourceCodester Online Job Portal 1. via /Employer/EditProfile.php

--- If you manage or use the SourceCodester Online Job Portal 1., there's an important security hole you need to know about. Let'

Feb 28, 2024 CSRF XSS PHP

CVE-2024-26450 - How Attackers Can Take Over Piwigo via CSRF + Stored XSS (Full Breakdown & Exploit)

A dangerous vulnerability has been discovered in Piwigo photo gallery software before version 14.2.. Identified as CVE-2024-26450, this security hole can let

Feb 28, 2024 XSS Exploit SQL PHP

CVE-2024-25202 - How a Simple XSS in PHPGurukul User Registration & Login Let Hackers Run Rogue Code

Discovered: Early 2024 Component: PHPGurukul User Registration & Login and User Management System *v1.* Vulnerability Type: Cross-Site Scripting (XSS) CVE: CVE-2024-25202 Introduction

Feb 28, 2024 CSRF WordPress API PHP MailerLite MailerLite – WooCommerce integration

CVE-2023-52223 - Understanding and Exploiting the CSRF Vulnerability in MailerLite – WooCommerce Integration (<= 2..8)

In early 2024, a significant Cross-Site Request Forgery (CSRF) vulnerability was disclosed in the MailerLite – WooCommerce integration WordPress plugin, tracked as CVE-2023-52223.