Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,805

All time

Critical · Active

12,186

CVSS ≥ 9.0

New · 14 days

3,113

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 5761–5790 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-8610	medium	5.3/10	SourceCodester Best House Rental Management System New Tenant Page index.php cross site scripting	Sep 9, 2024 1y ago
CVE-2024-8605	medium	6.9/10	code-projects Inventory Management Registration Form registration.php cross site scripting	Sep 9, 2024 1y ago
CVE-2024-8604	medium	6.9/10	SourceCodester Online Food Ordering System Create an Account Page index.php cross site scripting	Sep 9, 2024 1y ago
CVE-2024-8583	medium	5.3/10	SourceCodester Online Bank Management System Feedback mfeedback.php cross site scripting	Sep 8, 2024 1y ago
CVE-2024-8582	medium	5.3/10	SourceCodester Food Ordering Management System index.php cross site scripting	Sep 8, 2024 1y ago
CVE-2024-8570	medium	5.3/10	itsourcecode Tailoring Management System inccatadd.php sql injection	Sep 8, 2024 1y ago
CVE-2024-8569	medium	6.9/10	code-projects Hospital Management System user-login.php sql injection	Sep 8, 2024 1y ago
CVE-2024-8567	medium	6.9/10	itsourcecode Payroll Management System ajax.php sql injection	Sep 8, 2024 1y ago
CVE-2024-8566	medium	6.9/10	code-projects Online Shop Store settings.php cross site scripting	Sep 7, 2024 1y ago
CVE-2024-8565	medium	6.9/10	SourceCodesters Clinics Patient Management System print_diseases.php sql injection	Sep 7, 2024 1y ago
CVE-2024-8564	medium	5.3/10	SourceCodester PHP CRUD update.php sql injection	Sep 7, 2024 1y ago
CVE-2024-8563	medium	5.3/10	SourceCodester PHP CRUD update.php cross site scripting	Sep 7, 2024 1y ago
CVE-2024-8562	medium	5.3/10	SourceCodester PHP CRUD Add.php cross site scripting	Sep 7, 2024 1y ago
CVE-2024-8561	medium	5.3/10	SourceCodester PHP CRUD Delete Person delete.php sql injection	Sep 7, 2024 1y ago
CVE-2024-8560	medium	5.3/10	SourceCodester Simple Invoice Generator System save_invoice.php sql injection	Sep 7, 2024 1y ago
CVE-2024-8559	medium	5.1/10	SourceCodester Online Food Menu delete-menu.php sql injection	Sep 7, 2024 1y ago
CVE-2024-8558	medium	5.3/10	SourceCodester Food Ordering Management System Price place-order.php improper validation of specified quantity in input	Sep 7, 2024 1y ago
CVE-2024-8557	medium	5.3/10	SourceCodester Food Ordering Management System cancel-order.php sql injection	Sep 7, 2024 1y ago
CVE-2024-8555	medium	6.9/10	SourceCodester Clinics Patient Management System congratulations.php redirect	Sep 7, 2024 1y ago
CVE-2024-8554	medium	5.3/10	SourceCodester Clinics Patient Management System users.php cross site scripting	Sep 7, 2024 1y ago
CVE-2024-8523	medium	5.1/10	lmxcms SQL Command Execution Module admin.php formatData code injection	Sep 7, 2024 1y ago
CVE-2024-8416	medium	5.3/10	SourceCodester Food Ordering Management System ticket-status.php sql injection	Sep 4, 2024 1y ago
CVE-2024-8415	medium	5.3/10	SourceCodester Food Ordering Management System add-ticket.php sql injection	Sep 4, 2024 1y ago
CVE-2024-8411	medium	5.1/10	ABCD ABCD2 buscar_integrada.php cross site scripting	Sep 4, 2024 1y ago
CVE-2024-8410	medium	5.3/10	ABCD ABCD2 otros_sitios.php path traversal	Sep 4, 2024 1y ago
CVE-2024-8409	medium	5.3/10	ABCD ABCD2 show_image.php path traversal	Sep 4, 2024 1y ago
CVE-2024-8380	medium	5.3/10	SourceCodester Contact Manager with Export to VCF Delete Contact delete-account.php sql injection	Sep 3, 2024 1y ago
CVE-2024-8368	medium	6.9/10	code-projects Hospital Management System Login index.php sql injection	Sep 1, 2024 1y ago
CVE-2024-8366	medium	6.9/10	code-projects Pharmacy Management System Update My Profile Page index.php cross site scripting	Aug 31, 2024 1y ago
CVE-2024-7435	high	8.8/10	Attire <= 2.0.6 - Authenticated (Contributor+) PHP Object Injection	Aug 31, 2024 1y ago