PHP Vulnerabilities
467 vulnerabilities related to PHP
- PoC2026-08-25CVE-2019-11043: PHP-FPM Path Info Buffer Underflow - Remote Code Execution
- PoC2026-07-09CVE-2026-48611: phpBB < 3.3.17 - Authentication Bypass
- PoC2026-06-17CVE-2026-46364: phpMyFAQ <= 4.1.1 - SQL Injection
- PoC2026-06-17CVE-2026-6433: FlipperCode Custom CSS, JS & PHP <= 2.0.7 - Remote Code Execution
- 2026-06-05phpVMS /importer 未授权访问漏洞（CVE-2026-42569）
- PoC2026-05-19phpjabbers-event-booking-xss: PHPJabbers Event Booking Calendar - Reflected XSS
- 2026-05-15phpMyFAQ /api/captcha SQL 注入漏洞
- PoC2026-05-14CVE-2026-42569: phpVMS < 7.0.6 - Legacy Importer Authorization Bypass
- 2026-05-13phpVMS存在权限绕过漏洞(CVE-2026-42569)
- PoC2026-01-24CVE-2020-26935: phpMyAdmin < 5.0.3 - SQL Injection
- PoC2026-01-24php-prober-exposure: PHP Prober - Exposure
- PoC2026-01-24cakephp-debugkit-exposure: CakePHP - Debug Kit Toolbar Exposure
- PoC2026-01-16CVE-2025-69200: phpMyFAQ - Configuration Backup Disclosure
- PoC2026-01-08CVE-2017-11107: phpLDAPadmin <= 1.2.3 - Reflected XSS
- PoC2026-01-08CVE-2019-9082: ThinkPHP < 3.2.4 - Remote Code Execution
- PoC2026-01-08phpmyadmin-fpd: phpMyAdmin - Full Path Disclosure
- 2026-01-05phpMyFAQ /api/setup/backup 信息泄露漏洞（CVE-2025-69200）
- 2026-01-05phpMyFAQ /api/setup/backup 信息泄露漏洞（CVE-2025-69200）
- 2025-12-28PHP 安全漏洞
- PoC2025-12-12CVE-2019-10647: ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)
- PoC2025-12-02CVE-2023-38875: PHP Login System 2.0.1 - Cross-Site Scripting
- PoC2025-12-02functions-php-disclosure: functions.php Full Path Disclosure
- PoC2025-11-07CVE-2025-44136: MapTiler Tileserver-php v2.0 - Unauthenticated XSS
- PoC2025-11-07CVE-2025-44137: MapTiler Tileserver-php v2.0 - Unauthenticated File Read
- PoC2025-11-07generic-php-files: Generic PHP Backup Information Disclosure
- 2025-10-02PHPGurukul Employee Record Management System 代码注入漏洞
- 2025-09-26PHPJABBERS Restaurant Menu Maker Project 代码注入漏洞
- 2025-09-01php-livechat-uploadimg-html-upload: PHP LiveChat Upload
- 2025-09-01thinkphp-30-rce: Thinkphp 3.0 RCE
- 2025-09-01thinkphp-5.0.23-rce: Thinkphp debug 执行任意命令
- 2025-09-01thinkphp-50-rce: Thinkphp 5.0 RCE
- 2025-09-01thinkphp-v6-file-write: thinkphp-v6-file-write
- 2025-09-01weiphp-path-traversal: Weiphp Path Traversal
- 2025-09-01weiphp-sql: weiphp sql
- 2025-08-21ThinkPHP /index.php 信息泄露漏洞（CVE-2022-25481）
- 2025-08-21ThinkPHP /index.php 信息泄露漏洞（CVE-2022-25481）
- 2025-08-15MapTiler Tileserver-php v2.0 存在xss漏洞(CVE-2025-44136)
- 2025-08-15MapTiler Tileserver-php v2.0 存在目录遍历漏洞(CVE-2025-44137)
- PoC2025-08-01CVE-2018-19518: PHP imap - Remote Command Execution
- PoC2025-08-01CVE-2024-2961: PHP - LFR to Remote Code Execution
- PoC2025-08-01CVE-2007-5728: phpPgAdmin <=4.1.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2008-5587: phpPgAdmin <=4.2.1 - Local File Inclusion
- PoC2025-08-01CVE-2009-1151: PhpMyAdmin Scripts - Remote Code Execution
- PoC2025-08-01CVE-2010-4282: Pandora Fms < 3.1.1 - Directory Traversal
- PoC2025-08-01CVE-2012-0981: phpShowtime 2.0 - Directory Traversal
- PoC2025-08-01CVE-2012-1823: PHP CGI v5.3.12/5.4.2 Remote Code Execution
- PoC2025-08-01CVE-2014-10037: DomPHP 0.83 - Directory Traversal
- PoC2025-08-01CVE-2016-10033: WordPress PHPMailer < 5.2.18 - Remote Code Execution
- PoC2025-08-01CVE-2017-6090: PhpColl 2.5.1 Arbitrary File Upload
- PoC2025-08-01CVE-2017-9841: PHPUnit - Remote Code Execution
- PoC2025-08-01CVE-2018-12613: PhpMyAdmin <4.8.2 - Local File Inclusion
- PoC2025-08-01CVE-2018-19127: PHPCMS 2008 - Remote Code Execution via Template Injection
- PoC2025-08-01CVE-2018-19458: PHP Proxy 3.0.3 - Local File Inclusion
- PoC2025-08-01CVE-2018-20062: ThinkPHP 5.0.23 - Remote Code Execution
- PoC2025-08-01CVE-2019-19908: phpMyChat-Plus 1.98 - Cross-Site Scripting
- PoC2025-08-01CVE-2019-5127: YouPHPTube Encoder 2.3 - Remote Command Injection
- PoC2025-08-01CVE-2019-5128: YouPHPTube Encoder - Arbitrary File Write
- PoC2025-08-01CVE-2019-5129: YouPHPTube Encoder 2.3 - Command Injection
- PoC2025-08-01CVE-2019-6799: phpMyAdmin <4.8.5 - Local File Inclusion
- PoC2025-08-01CVE-2019-9762: PHPSHE 1.7 - SQL Injection
- PoC2025-08-01CVE-2020-11441: phpMyAdmin 5.0.2 - CRLF Injection
- PoC2025-08-01CVE-2020-20300: WeiPHP 5.0 - SQL Injection
- PoC2025-08-01CVE-2020-24949: PHP-Fusion 9.03.50 - Remote Code Execution
- PoC2025-08-01CVE-2020-5191: PHPGurukul Hospital Management System - Cross-Site Scripting
- PoC2025-08-01CVE-2020-5307: PHPGurukul Dairy Farm Shop Management System 1.0 - SQL Injection
- PoC2025-08-01CVE-2021-30134: Php-mod/curl Library <2.3.2 - Cross-Site Scripting
- PoC2025-08-01CVE-2021-37704: phpfastcache - phpinfo Resource Exposure
- PoC2025-08-01CVE-2022-23808: phpMyAdmin < 5.1.2 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-25481: ThinkPHP 5.0.24 - Information Disclosure
- PoC2025-08-01CVE-2022-3766: phpMyFAQ < 3.1.8 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-46888: NexusPHP <1.7.33 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-47945: Thinkphp Lang - Local File Inclusion
- PoC2025-08-01CVE-2023-0676: phpIPAM 1.5.1 - Cross-site Scripting
- PoC2025-08-01CVE-2023-0678: PHPIPAM <v1.5.1 - Missing Authorization
- PoC2025-08-01CVE-2023-1880: Phpmyfaq v3.1.11 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-24657: phpIPAM - 1.6 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-30210: OURPHP <= 7.2.0 - Cross Site Scripting
- PoC2025-08-01CVE-2023-30212: OURPHP <= 7.2.0 - Cross Site Scripting
- PoC2025-08-01CVE-2023-40748: PHPJabbers Food Delivery Script - SQL Injection
- PoC2025-08-01CVE-2023-40749: PHPJabbers Food Delivery Script v3.0 - SQL Injection
- PoC2025-08-01CVE-2023-40750: PHPJabbers Yacht Listing Script v1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-40751: PHPJabbers Fundraising Script v1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-40752: PHPJabbers Make an Offer Widget v1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-40753: PHPJabbers Ticket Support Script v3.2 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-40755: PHPJabbers Callback Widget v1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-4110: PHPJabbers Availability Booking Calendar 5.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-4111: PHPJabbers Bus Reservation System 1.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-4112: PHPJabbers Shuttle Booking Software 1.0 - Cross Site Scripting
- PoC2025-08-01CVE-2023-4113: PHPJabbers Service Booking Script 1.0 - Cross Site Scripting
- PoC2025-08-01CVE-2023-4115: PHPJabbers Cleaning Business 1.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-4116: PHPJabbers Taxi Booking 2.0 - Cross Site Scripting
- PoC2025-08-01CVE-2023-41538: PHPJabbers PHP Forum Script 3.0 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-5863: phpMyFAQ < 3.2.0 - Cross-site Scripting
- PoC2025-08-01CVE-2024-4577: PHP CGI - Argument Injection
- PoC2025-08-01CVE-2024-58136: Yii2 PHP Framework < 2.0.52 - Remote Code Execution
- PoC2025-08-01CNVD-2021-09693: WeiPHP5.0 任意用户Cookie伪造
- PoC2025-08-01CNVD-2024-39045: Thinkphp3 文件包含漏洞
- PoC2025-08-01CVE-2012-1823: PHP-CGI 远程代码执行漏洞
- PoC2025-08-01CVE-2017-9841: phpunit rce
- PoC2025-08-01CVE-2018-11686: FlexPaper PHP Publish Service RCE
- PoC2025-08-01CVE-2018-12613: PhpMyAdmin 4.8.1 Remote File Inclusion
- PoC2025-08-01CVE-2018-19127: PHPCMS 2008 Remote Code Execution
- PoC2025-08-01CVE-2018-7490: uWSGI PHP Plugin Directory Traversal
- PoC2025-08-01CVE-2019-5128: YouPHPTube Encoder base64Url getImageMP4.php命令注入漏洞
- PoC2025-08-01CVE-2019-5129: YouPHPTube Encoder getSpiritsFromVideo.php base64Url命令注入漏洞
- PoC2025-08-01CVE-2022-33107: ThinkPHP 6.0.12 反序列化 RCE
- PoC2025-08-01CVE-2022-47945: Thinkphp Lang - Local File Inclusion
- PoC2025-08-01CVE-2024-4577: PHP CGI - Argument Injection
- PoC2025-08-01phpmyadmin-default-login: phpMyAdmin - Default Login
- PoC2025-08-01thinkphp-errors: ThinkPHP Errors - Sensitive Information Exposure
- PoC2025-08-01bsphp-nauthorized-access: BSPHP index.php 未授权访问信息泄露漏洞
- PoC2025-08-01privesc-php: PHP - Privilege Escalation
- PoC2025-08-01kyan-network-module-php-rce: Kyan 网络监控设备 module.php 远程命令执行漏洞
- PoC2025-08-01php-zerodium-backdoor: PHP zerodium后门漏洞
- PoC2025-08-01phpmyadmin-misconfiguration: Sensitive data exposure
- PoC2025-08-01phpmyadmin-server-import: PhpMyAdmin Server Import
- PoC2025-08-01phpmyadmin-setup-deserialization: Phpmyadmin Setup Deserialization
- PoC2025-08-01phpmyadmin-setup: Publicly Accessible Phpmyadmin Setup
- PoC2025-08-01phpmywind-cms-id-sql-inject: PHPMyWind CMS id 参数 SQL 注入漏洞
- PoC2025-08-01phpok-sqli: phpok sqli
- PoC2025-08-01phpshe-sqli: phpshe sqli
- PoC2025-08-01phpstudy-backdoor-rce: Phpstudy backdoor rce
- PoC2025-08-01phpstudy-nginx-wrong-resolve: Phpstudy Nginx Wrong Resolve
- PoC2025-08-01phpweb-appplus-php-upload: phpweb 前台任意文件上传
- PoC2025-08-01rhaphp-universal-cookie: RHaphp universal cookie
- PoC2025-08-01thinkphp-2-rce: ThinkPHP 2 3 's' Parameter RCE
- PoC2025-08-01thinkphp-3-0-log-rce: Thinkphp 3.0 log 远程命令执行漏洞
- PoC2025-08-01thinkphp-5-0-23-index-php-method-rce: ThinkPHP 5.0.23 RCE
- PoC2025-08-01thinkphp-501-rce: ThinkPHP 5.0.1 - Remote Code Execution
- PoC2025-08-01thinkphp-5010-rce: ThinkPHP 5.0.10 RCE
- PoC2025-08-01thinkphp-5022-5129-rce: ThinkPHP 5.0.22 RCE
- PoC2025-08-01thinkphp-5023-rce: ThinkPHP 5.0.23 RCE
- PoC2025-08-01thinkphp-5024-5130-rce: ThinkPHP 5.0.22 TO 5.1.29 RCE
- PoC2025-08-01thinkphp-50x-arbitrary-file-read: Thinkphp 5.x Arbitrary file read
- PoC2025-08-01thinkphp-lang-rce: thinkphpRce
- PoC2025-08-01thinkphp5-controller-rce: thinkphp5-controller-rce
- PoC2025-08-01weiphp3-sessionid-fileupload: WeiPHP3.0 session_id 任意文件上传漏洞
- PoC2025-08-01wisegiga-nas-group-php-rce: WiseGiga NAS group.php 远程命令执行漏洞
- PoC2025-08-01yonyou-crm-import-php-fileupload: 用友CRM客户关系管理系统任意文件上传漏洞
- PoC2025-08-01php-webshell: PHP Webshell - Detect
- 2025-08-01CNVD-2020-68596: WeiPHP 5.0 - Path Traversal
- PoC2025-08-01CNVD-2022-86535: ThinkPHP Multi Languag - File Inc & Remote Code Execution (RCE)
- PoC2025-08-01CVE-2020-22165: PHPGurukul Hospital Management System 4.0 - SQL Injection
- PoC2025-08-01phpmyadmin-default-login: phpMyAdmin - Default Login
- PoC2025-08-01php-backup-files: PHP Source - Backup File Information Disclosure
- PoC2025-08-01settings-php-files: settings.php - Information Disclosure
- PoC2025-08-01cakephp-config: CakePHP Configuration File - Detect
- PoC2025-08-01php-cs-cache: PHP-CS-Fixer Cache - File Disclosure
- PoC2025-08-01php-ini: Php.ini File Disclosure
- PoC2025-08-01php-user-ini-disclosure: Php User.ini Disclosure
- PoC2025-08-01phpunit-result-cache-exposure: PHPUnit Result Cache File Exposure
- PoC2025-08-01clockwork-php-page: Clockwork PHP page exposure
- PoC2025-08-01default-spx-key: SPX PHP Profiler - Default Key
- PoC2025-08-01phpbb-installer: phpBB Installation File Exposure
- PoC2025-08-01phpgedview-installer: PhpGedView Installer Exposure
- PoC2025-08-01phpipam-installer: PHP IPAM Installation Page - Exposed
- PoC2025-08-01phpmyfaq-installer: phpMyFAQ Installation - Exposure
- PoC2025-08-01phpwind-installer: phpwind Installer Exposure
- PoC2025-08-01php-debugbar-exposure: Php Debug Bar - Exposure
- PoC2025-08-01php-fpm-status: PHP-FPM Status
- PoC2025-08-01php-src-diclosure: PHP Development Server <= 7.4.21 - Remote Source Disclosure
- PoC2025-08-01phpmemcached-admin-panel: phpMemcachedAdmin Panel
- PoC2025-08-01phpmyadmin-misconfiguration: phpmyadmin Data Exposure
- PoC2025-08-01pma-server-import: PhpMyAdmin Server Import Page - Detect
- PoC2025-08-01phpmyadmin-setup: PhpMyAdmin Setup File - Detect
- PoC2025-08-01phpnow-works: PHPnow works - Exposure
- PoC2025-08-01thinkphp-errors: ThinkPHP Errors - Sensitive Information Exposure
- PoC2025-08-01php-zerodium-backdoor-rce: PHP 8.1.0-dev - Backdoor Remote Code Execution
- PoC2025-08-01php-timeclock-xss: PHP Timeclock <=1.04 - Cross-Site Scripting
- PoC2025-08-01phpldapadmin-xss: PHP LDAP Admin < 1.2.5 - Cross-Site Scripting
- PoC2025-08-01phpok-sqli: PHPOK - SQL Injection
- PoC2025-08-01phpwiki-lfi: phpwiki 1.5.4 - Cross-Site Scripting/Local File Inclusion
- PoC2025-08-01twig-php-ssti: Twig PHP <2.4.4 template engine - SSTI
- PoC2025-08-01phpmyadmin-unauth-access: PhpMyAdmin - Unauthenticated Access
- PoC2025-08-01thinkphp-2-rce: ThinkPHP 2/3 - Remote Code Execution
- PoC2025-08-01thinkphp-501-rce: ThinkPHP 5.0.1 - Remote Code Execution
- PoC2025-08-01thinkphp-5023-rce: ThinkPHP 5.0.23 - Remote Code Execution
- PoC2025-08-01thinkphp6-arbitrary-write: ThinkPHP 6.0.0~6.0.1 - Arbitrary File Write
- PoC2025-08-01wp-insert-php-xss: WordPress Woody Code Snippets <2.4.6 - Cross-Site Scripting
- PoC2025-08-01wp-phpfreechat-xss: WordPress PHPFreeChat 0.2.8 - Cross-Site Scripting
- PoC2025-08-01CVE-2025-34045: WeiPHP 5.0 - Path Traversal
- PoC2025-08-01thinkphp-509-information-disclosure: ThinkPHP 5.0.9 Information Disclosure
- PoC2025-08-01phpmyadmin-panel: phpMyAdmin Panel
- PoC2025-08-01thinkphp-debug-detected: Thinkphp Debug Detected
- PoC2025-08-01thinkphp-detect: ThinkPHP detect
- 2025-07-25phpMyAdmin /phpmyadmin/index.php 未授权访问漏洞
- 2025-07-25phpMyAdmin /phpmyadmin/index.php 未授权访问漏洞
- 2025-07-23phpipam /functions/scripts/find_full_subnets.php 未授权访问漏洞 （CVE-2023-0678）
- 2025-07-23phpipam /functions/scripts/find_full_subnets.php 未授权访问漏洞 （CVE-2023-0678）
- 2025-07-16PHPGurukul Student Result Management System 注入漏洞
- 2025-07-04（CVE-2025-4414）CMSMasters Content Composer PHP 远程文件包含漏洞
- 2025-06-23PHPGurukul COVID19 Testing Management System 代码注入漏洞
- 2025-06-20PHP backup 信息泄露漏洞
- 2025-06-20php-files / 信息泄露漏洞
- 2025-06-20PHP backup 信息泄露漏洞
- 2025-06-20php-files / 信息泄露漏洞
- 2025-06-10PHPGurukul Human Metapneumovirus Testing Management System 注入漏洞
- 2025-06-10PHPGurukul Human Metapneumovirus Testing Management System 注入漏洞
- 2025-05-30PHPGurukul Employee Record Management System 注入漏洞
- 2025-05-30PHPGurukul Employee Record Management System 注入漏洞
- 2025-05-30PHPGurukul Employee Record Management System 注入漏洞
- 2025-05-28（CVE-2025-5248）PHPGurukul访客管理系统1.0 /bwdates-reports-details.php SQL注入漏洞
- 2025-05-19PHPGurukul Vehicle Parking Management System 注入漏洞
- 2025-05-15PHPGurukul Apartment Visitors Management System 注入漏洞
- 2025-05-05PHPGurukul Online Birth Certificate System 注入漏洞
- 2025-05-05PHPGurukul Teacher Subject Allocation Management System 注入漏洞
- 2025-05-05PHPGurukul Online DJ Booking Management System 注入漏洞
- 2025-05-05PHPGurukul Online Birth Certificate System 注入漏洞
- 2025-05-02PHPGurukul Curfew e-Pass Management System 注入漏洞
- 2025-05-01PHPGurukul COVID19 Testing Management System 注入漏洞
- 2025-05-01PHPGurukul COVID19 Testing Management System 注入漏洞
- 2025-05-01PHPGurukul Nipah virus Testing Management System 注入漏洞
- 2025-05-01PHPGurukul Nipah virus Testing Management System 注入漏洞
- 2025-05-01PHPGurukul Pre-School Enrollment System 注入漏洞
- 2025-04-23PHPGurukul Men Salon Management System 注入漏洞
- 2025-04-23PHPGurukul Men Salon Management System 注入漏洞
- 2025-04-23PHPGurukul Men Salon Management System 注入漏洞
- 2025-04-22PHPGurukul Men Salon Management System 注入漏洞
- 2025-04-17PHPSHE 注入漏洞
- 2025-04-16指挥调度管理平台setkvpairs.php存在未授权SQL注入漏洞
- 2025-04-09PHPGurukul Men Salon Management System 注入漏洞
- 2025-04-09PHPGurukul Men Salon Management System 注入漏洞
- 2025-04-09PHPGurukul Men Salon Management System 注入漏洞
- 2025-04-09PHPGurukul Men Salon Management System 注入漏洞
- 2025-04-04（CVE-2025-3220）PHPGurukul e-Diary Management System 1.0 SQL注入漏洞
- 2025-04-04(CVE-2025-3239) PHPGurukul Online Fire Reporting System 1.2 SQL注入漏洞
- 2025-04-04（CVE-2025-3240）PHPGurukul Online Fire Reporting System 1.2 searchdata参数SQL注入漏洞
- 2025-04-04（CVE-2025-3242）PHPGurukul e-Diary Management System SQL注入漏洞
- 2025-03-09E-Commerce-Website-Using-PHP 注入漏洞
- 2025-03-09PHPGurukul Pre-School Enrollment System 注入漏洞
- 2025-02-26PHPGurukul Nipah Virus Testing Management System 注入漏洞
- 2025-02-26PHPGurukul Online Nurse Hiring System 注入漏洞
- 2025-02-26PHPGurukul Online Nurse Hiring System 注入漏洞
- 2025-02-26PHPGurukul Online Nurse Hiring System 注入漏洞
- 2024-12-31PHPGurukul Maid Hiring Management System 代码注入漏洞
- 2024-12-31PHPGurukul Maid Hiring Management System 代码注入漏洞
- 2024-12-31PHPGurukul Maid Hiring Management System 代码注入漏洞
- 2024-12-31PHPGurukul Maid Hiring Management System 代码注入漏洞
- 2024-12-31PHPGurukul Maid Hiring Management System 注入漏洞
- 2024-12-31PHPGurukul Maid Hiring Management System 代码注入漏洞
- 2024-12-31PHPGurukul Maid Hiring Management System 注入漏洞
- 2024-12-31PHPGurukul Complaint Management System 注入漏洞
- 2024-12-31PHPGurukul Small CRM 注入漏洞
- 2024-12-31PHPGurukul Small CRM 注入漏洞
- 2024-12-31PHPGurukul Small CRM 注入漏洞
- 2024-12-27PHPStudy 远程代码执行漏洞
- 2024-12-24Phpok 目录遍历漏洞
- 2024-12-18OurPhp ourphp_bannerview.php SQL注入漏洞
- 2024-12-18OurPhp ourphp_langview.php SQL注入漏洞
- 2024-11-29PHP反序列化漏洞
- 2024-11-07Thinkphp 未授权 反序列化漏洞
- 2024-11-01PHPYun-招聘系统 远程命令执行漏洞
- 2024-10-28PHPGurukul Medical Card Generation System SQL注入漏洞
- 2024-10-28PHPGurukul Medical Card Generation System SQL注入漏洞
- 2024-10-28PHPGurukul Medical Card Generation System SQL注入漏洞
- 2024-10-28PHPGurukul Medical Card Generation System SQL注入漏洞
- 2024-10-15Yourphp企业建站系统 register SQL注入漏洞
- 2024-09-30phpPgAdmin /phppgadmin/redirect.php 默认口令漏洞
- 2024-09-30PHPUnit eval-stdin.php 代码执行漏洞 （CVE-2017-9841）
- 2024-09-30phpPgAdmin /phppgadmin/redirect.php 默认口令漏洞
- 2024-09-30PHPUnit eval-stdin.php 代码执行漏洞 （CVE-2017-9841）
- 2024-08-14PHP-CGI CVE-2024-4577 命令注入漏洞 (-d)
- 2024-08-14PHP-CGI CVE-2024-4577 命令注入漏洞 (-s)
- 2024-08-07CutePHP CuteNews 2.1.2 远程代码执行漏洞
- 2024-08-07PHP FPM fpm_main.c 远程代码执行漏洞
- 2024-08-07PHP Advanced Transfer Manager 1.30 源码泄露漏洞
- 2024-07-31来客PHP在线客服系统 /admin/users/upavatar.html 任意文件上传漏洞
- 2024-07-26ThinkPHP5拼团拼购系统avatar任意文件写入漏洞
- 2024-07-25CLTPHP 5.5.3版本存在任意文件上传漏洞
- 2024-07-22锐捷 flwo.control.php 远程代码执行漏洞
- 2024-07-01phpMyAdmin 3.5.2.2 server-sync.php 后门漏洞（CVE-2012-5159）
- 2024-06-21PHP imap 远程命令注入漏洞
- 2024-06-21ThinkPHP CVE-2018-16385 SQL注入漏洞
- 2024-06-15PHP Composer 命令注入漏洞
- 2024-06-13百卓网络智能管理平台web.php任意文件上传漏洞
- 2024-06-12XAMPP Windows PHP-CGI 代码执行漏洞
- 2024-06-12WeiPHP 后台弱口令漏洞
- 2024-06-12XAMPP Windows PHP-CGI 代码执行漏洞
- 2024-06-08PHP CGI 存在代码注入漏洞
- 2024-06-07PHP CGI Windows平台远程代码执行漏洞
- 2024-05-31PHP Applications CVE-2024-2756 安全限制绕过漏洞
- 2024-05-31WeiPHP bind_follow CVE-2020-20300 SQL注入漏洞
- 2024-05-17宇视科技ISC 2500-S VM.php CVE-2024-0778 远程命令注入漏洞
- 2024-04-25ThinkPHP appError 存在任意文件读取
- 2024-04-03PhpFox CVE-2023-46817 不安全的反序列化漏洞
- 2024-04-01PHPIPAM 未find_full_subnets.php 存在授权访问漏洞
- 2024-03-26ThinkPHP 6.0.12 LTS反序列化
- 2024-03-20WeiPHP scan_callback 远程代码执行漏洞
- 2024-03-12WeiPHP Notice/index接口处存在代码执行漏洞
- 2024-03-07elFinder PHP Connector CVE-2021-32682远程代码执行漏洞
- 2024-03-07YouPHPTube Encoder getImageMP4.php 命令注入漏洞
- 2024-02-29PHP zend_hash_destroy未初始化指针代码执行漏洞
- 2024-02-27Yourphp index.php SQL 注入漏洞
- 2024-02-26phpcms 弱口令漏洞
- 2024-02-26phpPgAdmin 弱口令漏洞
- 2024-02-22phpok5.3 project_control.php 存在 sql注入
- 2024-02-22ThinkPHP Framework 信息泄露漏洞
- 2024-02-22PhpIPAM CVE-2022-23046 SQL注入漏洞
- 2024-02-22ZZZPHP CVE-2022-23881远程代码执行漏洞
- 2024-02-22phpMyAdmin CVE-2022-23808 跨站脚本漏洞
- 2024-02-10PHPJabbers Event Ticketing System 跨站脚本漏洞
- 2024-02-10PHPJabbers Shared Asset Booking System 跨站脚本漏洞
- 2024-02-10PHPJabbers Event Ticketing System 跨站脚本漏洞
- 2024-02-10PHPJabbers Event Ticketing System 跨站脚本漏洞
- 2024-02-10PHPJabbers Cleaning Business Software 跨站脚本漏洞
- 2024-01-09ThinkPHP lang文件包含漏洞
- 2023-11-08Weiphp存在SQL注入
- 2023-10-26(CVE-2023-42769) PHP Cookie会话ID 信息泄露漏洞
- 2023-09-28WeiPHP 微信开发平台 _send_by_group 文件 group_id 参数 SQL 注入漏洞
- 2023-09-28WeiPHP 微信开发平台 _send_by_group 文件 group_id 参数 SQL 注入漏洞
- 2023-09-22PHP User-Agentt 远程代码执行漏洞
- 2023-09-22PHP User-Agentt 远程代码执行漏洞
- 2023-08-30phpsysinfo存在JSONP劫持漏洞
- 2023-07-25YouPHPTube <=10.0 版本存在sql注入漏洞(CVE-2021-25874)
- 2023-07-11ThinkPHP lang参数 远程命令执行漏洞
- 2023-07-11phpMyAdmin 跨站请求伪造漏洞
- 2023-07-10phpok v5.4 sql注入(CVE-2020-21486)
- 2023-07-05WeiPHP5.0 bind_follow 存在SQL注入漏洞
- 2023-06-28phpABook 0.9i存在sql延时注入(CVE-2022-30352)
- 2023-06-05phpCMS存在路径遍历漏洞(CVE-2020-22200)
- 2023-05-26Weiphp任意文件上传漏洞
- 2023-04-12PhpColl 2.5.1文件上传(CVE-2017-6090)
- 2023-03-22ThinkPHP Debug 模式日志信息泄露漏洞
- 2023-03-22ThinkPHP URI 路径存在远程命令执行
- 2023-03-22ThinkPHP X-Forwarded-For 头存在SQL注入漏洞
- 2023-03-14phpMyAdmin /scripts/setup.php 存在反序列化
- 2023-03-14PHPOA upload/index.php 路径存在任意文件上传漏洞
- 2022-12-01ThinkPHP 5.0.24 信息泄露(CVE-2022-25481)
- 2022-11-25CLTPHP upload 任意文件上传漏洞
- 2022-11-09phpok6.1反序列化漏洞(CVE-2022-40889)
- 2022-09-29Hospital Management System SQL注入漏洞(CVE-2022-33880)
- 2022-07-15i3geo文件codemirror.php任意文件下载(CVE-2022-32409)
- 2022-07-08phpmoadmin 远程代码执行 （CVE-2015-2208）
- 2022-07-08phpcgi 代码执行(CVE-2012-1823)
- 2022-06-24Thinkphp5-SQL注入漏洞
- 2022-06-20thinkphp3.2.x 代码执行
- 2022-06-10youphptube插件AD_Server的SQL注入(CVE-2019-5120)
- 2022-06-10youphptube插件LiveChat的SQL注入(CVE-2019-18662)
- 2022-04-26Phpweb 前台任意文件上传漏洞
- 2022-04-26来客PHP在线客服系统任意文件上传漏洞
- 2022-04-06DolphinPHP系统默认密码
- 2022-03-26ThinkPHP 存在敏感信息泄露漏洞
- 2022-02-21ThinkPHP 安全漏洞
- 2021-12-29PHPSHE 1.7前台SQL注入
- 2021-12-21ThinkPHP 5.x 远程代码执行漏洞
- 2021-11-11PHP imap 远程命令执行漏洞（CVE-2018-19518）
- 2021-08-03phpMyAdmin 弱口令漏洞
- 2021-07-20phpunit 远程代码执行漏洞（CVE-2017-9841）
- 2021-07-15宇视科技视频监控设备VM.php命令执行漏洞
- 2021-04-28PHP zerodium后门漏洞
- 2021-03-15ThinkPHP SQL注入漏洞
- 2021-03-11PHP-FPM Fastcgi 未授权访问致远程代码执行漏洞
- 2021-03-11phpMyAdmin setup 目录信息泄露漏洞
- 2021-03-11phpMyAdmin setup.php 文件读取漏洞
- 2021-03-11ThinkPHP <=2.2 远程代码执行漏洞
- 2021-03-11ThinkPHP InvokeFunction 远程代码执行漏洞
- 2021-03-11ThinkPHP _method 远程代码执行漏洞
- 2021-03-11ThinkPHP6 任意文件操作漏洞
- 2021-01-22Weiphp5.0 前台文件任意读取
- 2021-01-19youphptube重装导致远程命令执行
- 2021-01-19phpMyAdmin setup 目录信息泄露
- 2021-01-19BSPHP存在未授权访问
- 2021-01-19phpmyadmin 4.8.1 远程文件包含漏洞（CVE-2018-12613）
- 2021-01-19uWSGI PHP目录穿越漏洞（CVE-2018-7490）
- 2021-01-19PHPStudy php_xmlrpc.dll文件后门漏洞
- 2021-01-19ThinkPHP-远程命令执行
- 2021-01-19Thinkphp3.1&3.2 debug模式-日志泄露
- 2021-01-19PHPyun /index.php-XML注入
- 2021-01-19phpMyAdmin-通用和默认口令B
- 2021-01-19phpcms-任意文件读取漏洞
- 2021-01-19Mvmmall_search_php-SQL 注入
- 2021-01-19zzzphp系统1.5.9前台-代码执行
- 2021-01-19zzzphp建站系统1.6.1-后门可直接获取数据库信息
- 2021-01-19zzzphp建站系统1.6.1-SQL注入
- 2021-01-19weiphp开源微信公众号平台开发框架前台-SQL注入
- 2021-01-19weiphp开源微信公众号平台开发框架前台-SQL注入集合
- 2021-01-19Thinkphp5.0.23-远程命令执行
- 2021-01-19Thinkphp框架index.php X-Forwarded-For-SQL注入
- 2021-01-19Thinkphp5-远程代码执行(CVE-2018-1002015,CVE-2019-9082)
- 2021-01-19PHPWEB index.php?myord-SQL注入
- 2021-01-19PHPsysinfo-信息泄露
- 2021-01-19phpok idstring-SQL注入
- 2021-01-19PHPmyadmin-信息泄露phpinfo
- 2021-01-19phpmyadmin_2.8-本地文件包含漏洞
- 2021-01-19phpecms cms_welcome.php 后台-登录绕过
- 2021-01-19phpdashboardv4-任意文件读取
- 2021-01-19phpdashboardv4-SQL注入
- 2021-01-19phpcms 2008 yp/product.php-SQL注入
- 2021-01-19phpcms v9 authkey-泄露漏洞
- 2021-01-19Phpcms v9-关键key泄露
- 2021-01-19phpcms V9.6-代码注入
- 2021-01-19phpmps分类信息发布系统search.php文件custom参数-SQL注入
- 2021-01-19Phpcms v9 poster_click-SQL注入
- 2021-01-19phpcms index.php?m=member前台-获得Shell
- 2021-01-19phpcms2008-GBK版宽字符注入漏洞
- 2021-01-19phpcms flash_upload.php-SQL注入
- 2021-01-19phpcms_v9-本地文件包含漏洞
- 2021-01-19phpcms v9.6.0-代码注入
- 2021-01-19phpcms2008 urlencode导致-SQL注入
- 2021-01-19phpcms2008 urldecode导致-SQL注入
- 2021-01-19phpcms 2008 product.php pagesize参数-代码注入
- 2021-01-19phpcms2008sp4-代码注入漏洞
- 2021-01-19phpcms2008 任意PHP-代码执行漏洞
- 2021-01-19phpcms2008 job模块-SQL注入
- 2021-01-19php web stat v4.x.x -源码泄露
- 2021-01-19php web stat v4.5.03-数据库泄露
- 2021-01-19php7cms系统Api/Api.php文件save_form_data方法-代码执行
- 2021-01-19house5 index.php-SQL注入
- 2021-01-19合众商道php系统list.php-SQL注入
- 2021-01-19Template.php num变量-SQL注入
- 2021-01-19ajax_dialog.php-SQL注入
- 2021-01-19douphp /cache目录-物理路径泄漏
- 2021-01-19PHP Coupon Script 6.0 - 'cid' Parameter-SQL注入
- 2021-01-19WeiPHP5.0beta版-信息泄露
- 2021-01-19ThinkPHP框架index.php s参数-SQL注入(CVE-2018-10225)
- 2021-01-19PhpCollab-SQL注入
- 2021-01-19phpcms系统api.php文件cachefile参数-文件读取漏洞
- 2021-01-19PHPWEB系统post.php文件groupid参数-SQL注入
- 2021-01-19PHPWEB /down/class/index.php-SQL注入
- 2021-01-19PHPOA V4.0 upload/index.php-任意文件上传
- 2021-01-19PHPMyWind系统shoppingcart.php文件-SQL注入
- 2021-01-19PHPMyWind系统4g.php文件tbname参数-SQL注入
- 2021-01-19phpcms系统2007digg_add.php文件id参数-SQL注入
- 2019-10-28PHP远程代码执行漏洞
- 2019-02-25ThinkPHP < 5.0.24/5.1.33远程代码执行漏洞
- 2019-01-27phpMyAdmin 信息泄露漏洞
- 2018-11-09PHPCMS 2008 type.php 远程代码执行漏洞
- 2018-10-20ThinkPHP <=3.2.4 SQL注入漏洞（CNVD-2018-21507）
- 2018-10-20ThinkPHP <= 5.1.25 SQL注入漏洞（CNVD-2018-21508）
- 2018-06-22phpMyAdmin 安全漏洞
- 2018-06-16PHPOK 任意文件上传漏洞
- 2018-01-04PHP Smarty smarty_internal_runtime_codeframe 远程代码执行漏洞
- 2017-06-28PHPUnit eval-stdin.php 远程代码执行漏洞
- 2017-02-07PHP Gettext远程代码执行漏洞
- 2017-01-11PHP Zend/zend_hash.c远程代码执行漏洞
- 2016-12-11phpMyAdmin 远程代码执行漏洞
- 2016-12-11phpMyAdmin 远程代码执行漏洞
- 2016-09-12PHP‘__wakeup()’远程代码执行漏洞
- 2016-07-25PHP TSRM/tsrm_virtual_cwd.c文件整数溢出漏洞
- 2016-07-03phpMyAdmin 4.0.x ～4.6.2 远程代码执行漏洞
- 2016-01-19PHP‘spl_array.c’释放后重用漏洞
- 2016-01-19PHP SPL组件远程代码执行漏洞
- 2016-01-19PHP‘serialize_function_call()’函数远程代码执行漏洞
- 2013-04-26phpMyAdmin ‘filename_template’远程代码执行漏洞
- 2012-05-11PHP-FPM 远程代码执行漏洞
- 2011-08-02phpMyAdmin远程代码执行漏洞
- 2010-05-08PHP sqlite_single_query和sqlite_array_query函数SQL注入漏洞
- 2009-08-12phpstore auto_classifieds 任意文件上传漏洞
- 2009-08-12phpstore complete_classifieds 任意文件上传漏洞
- 2009-08-12phpstore real_estate 任意文件上传漏洞
- 2009-08-12phpstore phpcareers 任意文件上传漏洞
- 2009-08-11W2B phpAdBoard 'index.php'任意文件上传漏洞
- 2009-08-11W2B phpEmployment 'auth.php'任意文件上传漏洞
- 2009-07-08W2B phpGreetCards 'index.php' 任意文件上传漏洞
- 2009-03-27PHPMyAdmin /config/config.inc.php 代码执行漏洞
- 2009-03-24Aphpkb Andy's PHP Knowledgebase 'saa.php'任意文件上传漏洞
- 2009-02-20PHPG Upload "form_upload.php" 任意文件上传漏洞
- 2008-12-27BLOG 'image_upload.php' 任意文件上传漏洞
- 2008-10-28PHP-Nuke DownloadsPlus模块任意文件上传漏洞
- 2008-07-11RETIRED: PHPmotion 'update_profiel' 文件中任意文件上传漏洞
- 2008-01-23PHP F1 Max's File Uploader 'index.php' 任意文件上传漏洞
- 2007-10-31Japanese PHP Gallery Hosting 'upload.php' 任意文件上传漏洞
- 2007-09-25SimplePHPBlog img_upload_cgi.php 任意文件上传漏洞
- 2007-05-24PHP ext/standard/array.c 拒绝服务攻击漏洞
- 2007-04-25Maran PHP Forum Forum_write.PHP 任意文件上传漏洞
- 2007-04-19AJPortal2PHP 多个PHP远程文件包含漏洞
- 2005-11-02phpBB 禁用register_long_arrays指令绕过安全机制漏洞