PHP - CVE CyberSecurity Database News (Page 96)

Feb 27, 2024 Exploit PHP

CVE-2024-1925 - Critical Unrestricted File Upload Vulnerability in Ctcms 2.1.2 (VDB-254860)

--- Introduction A critical security issue has been discovered in Ctcms version 2.1.2 that could allow attackers to upload malicious files to the server

Feb 27, 2024 XSS Exploit PHP

CVE-2024-25399 - Subrion CMS 4.2.1 adminer.php XSS Vulnerability Explained with Examples

Subrion CMS is a popular open-source content management system written in PHP. In early 2024, a critical security flaw was discovered in version 4.

Feb 27, 2024 Exploit SQL PHP

CVE-2024-25400 - Subrion CMS 4.2.1 SQL Injection in ia.core.mysqli.php — What’s Really Going On?

In early 2024, a security advisory caught the web application world’s attention: Subrion CMS 4.2.1 allegedly contained a serious SQL Injection vulnerability

Feb 27, 2024 XSS PHP rails

CVE-2024-26143 - XSS Vulnerability in Rails Translation Helpers – How It Works, Example Exploit, and Patch Guidance

If you’re running a Ruby on Rails app and using translation helpers like t or translate, you may be sitting on an unnoticed security

Feb 27, 2024 XSS PHP SourceCodester Online Job Portal

CVE-2024-1922 - Cross Site Scripting Vulnerability in SourceCodester Online Job Portal 1. – How It Works and How to Stay Safe

A new vulnerability, tagged as CVE-2024-1922, has been discovered in SourceCodester Online Job Portal version 1.. This vulnerability was found in the ManageJob.