{"uuid": "644e3e40-40fd-45c7-8b3a-5dc68dc2993c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44289", "type": "seen", "source": "https://t.me/hacking_Attack/187001", "content": "PHP may not have as many problems as people think.\nhttps://www.reddit.com/r/Pentesting/comments/1u2ahtj/php_may_not_have_as_many_problems_as_people_think/\n\nWe always thought PHP had many vulnerabilities, but that is not really true. Recently, I have been testing a website that uses ThinkPHP 5.0.24 and FastAdmin. I found the server IP address, subdomains, and some paths such as main, api, admin, and img. I checked:  File upload (CVE-2022-44289) Some serialized interfaces SQL injection testing on the login page with sqlmap Weak passwords on the login page CVEs: CVE-2024-7928, CVE-2022-47945, CVE-2021-23592 Nginx 1.26.1, no serious vulnerabilities found MySQL is installed, port 3306 is open  I am still testing:  PHP vulnerabilities (7.2, 7.3, 7.4, etc.)  Now I am confused. What should I do next?    submitted by    /u/Able_Statistician201  (https://www.reddit.com/user/Able_Statistician201) \n [link] (https://www.reddit.com/r/Pentesting/comments/1u2ahtj/php_may_not_have_as_many_problems_as_people_think/)   [comments] (https://www.reddit.com/r/Pentesting/comments/1u2ahtj/php_may_not_have_as_many_problems_as_people_think/)", "creation_timestamp": "2026-09-01T20:00:07.997212Z"}