PHP Composer 命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• PoCCVE-2019-11043: PHP-FPM Path Info Buffer Underflow - Remote Code Execution
• PoCCVE-2026-48611: phpBB < 3.3.17 - Authentication Bypass
• PoCCVE-2026-46364: phpMyFAQ <= 4.1.1 - SQL Injection
• PoCCVE-2026-6433: FlipperCode Custom CSS, JS & PHP <= 2.0.7 - Remote Code Execution
• phpVMS /importer 未授权访问漏洞（CVE-2026-42569）
• PoCphpjabbers-event-booking-xss: PHPJabbers Event Booking Calendar - Reflected XSS
• phpMyFAQ /api/captcha SQL 注入漏洞
• PoCCVE-2026-42569: phpVMS < 7.0.6 - Legacy Importer Authorization Bypass
• phpVMS存在权限绕过漏洞(CVE-2026-42569)
• PoCCVE-2020-26935: phpMyAdmin < 5.0.3 - SQL Injection
• PoCphp-prober-exposure: PHP Prober - Exposure
• PoCcakephp-debugkit-exposure: CakePHP - Debug Kit Toolbar Exposure
• PoCCVE-2025-69200: phpMyFAQ - Configuration Backup Disclosure