PHP Security

Nachricht

Failed loading XML... attributes construct error Couldn't find end of Start Tag rss line 1 Extra content at the end of the document

Visitor Management System In PHP 1.0 Cross Site Scripting
PHP Files ≈ Packet Storm Sep 22, 2020 | 18:30 pm
Visitor Management System in PHP version 1.0 suffers from an unauthenticated persistent cross site scripting vulnerability.
Read more...
Visitor Management System In PHP 1.0 SQL Injection
PHP Files ≈ Packet Storm Sep 22, 2020 | 18:29 pm
Visitor Management System in PHP version 1.0 suffers from a remote SQL injection vulnerability.
Read more...
B-swiss 3 Digital Signage System 3.6.5 Backdoor Remote Code Execution
PHP Files ≈ Packet Storm Sep 21, 2020 | 14:52 pm
B-swiss 3 Digital Signage System version 3.6.5 suffers from an authenticated arbitrary PHP code execution vulnerability. The vulnerability is caused due to the improper verification of uploaded files in index.php script thru the rec_poza POST parameter. This can be exploited[…]
Read more...
Mida Solutions eFramework ajaxreq.php Command Injection
PHP Files ≈ Packet Storm Sep 16, 2020 | 15:37 pm
This Metasploit module exploits a command injection vulnerability in Mida Solutions eFramework version 2.9.0 and prior. The ajaxreq.php file allows unauthenticated users to inject arbitrary commands in the PARAM parameter to be executed as the apache user. The sudo configuration[…]
Read more...
Gentoo Linux Security Advisory 202009-10
PHP Files ≈ Packet Storm Sep 14, 2020 | 14:46 pm
Gentoo Linux Security Advisory 202009-10 - A vulnerabilities in PHP could lead to a Denial of Service condition. Versions less than 7.2.33:7.2 are affected.
Read more...
Red Hat Security Advisory 2020-3662-01
PHP Files ≈ Packet Storm Sep 8, 2020 | 18:10 pm
Red Hat Security Advisory 2020-3662-01 - PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Issues addressed include buffer over-read, buffer overflow, code execution, information leakage, integer overflow, null pointer, out of bounds read, and use-after-free[…]
Read more...
D-Link Central WiFi Manager CWM(100) Remote Code Execution
PHP Files ≈ Packet Storm Aug 18, 2020 | 16:21 pm
This Metasploit module exploits a PHP code injection vulnerability in D-Link Central WiFi Manager CWM(100) versions below v1.03R0100_BETA6. The vulnerability exists in the username cookie, which is passed to eval() without being sanitized. Dangerous functions are not disabled by default,[…]
Read more...
vBulletin 5.x Remote Code Execution
PHP Files ≈ Packet Storm Aug 13, 2020 | 16:57 pm
This Metasploit module exploits a logic bug within the template rendering code in vBulletin 5.x. The module uses the vBulletin template rendering functionality to render the widget_tabbedcontainer_tab_panel template while also providing the widget_php argument. This causes the former template to[…]
Read more...
Baldr Botnet Panel Shell Upload
PHP Files ≈ Packet Storm Jul 29, 2020 | 18:56 pm
This Metasploit module exploits a arbitrary file upload vulnerability within the Baldr stealer malware control panel. Attackers can turn this vulnerability into remote code execution by adding malicious PHP code inside the victim logs ZIP file and registering a new[…]
Read more...
Pandora FMS 7.0 NG 7XX Remote Command Execution
PHP Files ≈ Packet Storm Jul 11, 2020 | 14:16 pm
This Metasploit module exploits a vulnerability (CVE-2020-13851) in Pandora FMS versions 7.0 NG 742, 7.0 NG 743, and 7.0 NG 744 (and perhaps older versions) in order to execute arbitrary commands. This module takes advantage of a command injection vulnerability[…]
Read more...