Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,805

All time

Critical · Active

12,186

CVSS ≥ 9.0

New · 14 days

3,113

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 5821–5850 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-8217	medium	6.9/10	SourceCodester E-Commerce Website registration.php sql injection	Aug 27, 2024 2y ago
CVE-2024-8216	medium	5.3/10	nafisulbari/itsourcecode Insurance Management System Payment editPayment.php access control	Aug 27, 2024 2y ago
CVE-2024-8209	medium	5.3/10	nafisulbari/itsourcecode Insurance Management System addClient.php cross site scripting	Aug 27, 2024 2y ago
CVE-2024-8208	medium	5.3/10	nafisulbari/itsourcecode Insurance Management System editClient.php cross site scripting	Aug 27, 2024 2y ago
CVE-2024-8174	medium	6.9/10	code-projects Blood Bank System Login Page login.php cross site scripting	Aug 26, 2024 2y ago
CVE-2024-8173	medium	6.9/10	code-projects Blood Bank System Login Page login.php sql injection	Aug 26, 2024 2y ago
CVE-2024-8172	medium	5.3/10	SourceCodester QR Code Attendance System delete-student.php cross site scripting	Aug 26, 2024 2y ago
CVE-2024-8171	medium	5.3/10	itsourcecode Tailoring Management System staffcatedit.php sql injection	Aug 26, 2024 2y ago
CVE-2024-8170	medium	5.3/10	SourceCodester Zipped Folder Manager App add-folder.php unrestricted upload	Aug 26, 2024 2y ago
CVE-2024-8169	medium	6.9/10	code-projects Online Quiz Site signupuser.php sql injection	Aug 26, 2024 2y ago
CVE-2024-8168	medium	6.9/10	code-projects Online Bus Reservation Site login.php sql injection	Aug 26, 2024 2y ago
CVE-2024-8167	medium	6.9/10	code-projects Job Portal forget.php sql injection	Aug 26, 2024 2y ago
CVE-2024-8166	medium	5.1/10	Ruijie EG2000K index.php unrestricted upload	Aug 26, 2024 2y ago
CVE-2024-8164	medium	5.3/10	Chengdu Everbrite Network Technology BeikeShop FileManagerController.php rename unrestricted upload	Aug 26, 2024 2y ago
CVE-2024-8154	medium	5.3/10	SourceCodester QR Code Bookmark System Parameter update-bookmark.php cross site scripting	Aug 25, 2024 2y ago
CVE-2024-8153	medium	5.3/10	SourceCodester QR Code Bookmark System delete-bookmark.php cross site scripting	Aug 25, 2024 2y ago
CVE-2024-8152	medium	5.3/10	SourceCodester QR Code Bookmark System Parameter add-bookmark.php cross site scripting	Aug 25, 2024 2y ago
CVE-2024-8151	medium	5.3/10	SourceCodester Interactive Map with Marker delete-mark.php cross site scripting	Aug 25, 2024 2y ago
CVE-2024-8147	medium	5.3/10	code-projects Pharmacy Management System index.php sql injection	Aug 25, 2024 2y ago
CVE-2024-8146	medium	5.3/10	code-projects Pharmacy Management System index.php sql injection	Aug 25, 2024 2y ago
CVE-2024-8142	medium	5.3/10	SourceCodester Daily Calories Monitoring Tool delete-calorie.php cross site scripting	Aug 25, 2024 2y ago
CVE-2024-8141	medium	5.3/10	SourceCodester Daily Calories Monitoring Tool add-calorie.php cross site scripting	Aug 25, 2024 2y ago
CVE-2024-8140	medium	5.3/10	SourceCodester Task Progress Tracker update-task.php cross site scripting	Aug 25, 2024 2y ago
CVE-2024-8139	medium	5.3/10	itsourcecode E-Commerce Website search_list.php sql injection	Aug 25, 2024 2y ago
CVE-2024-8138	medium	5.3/10	code-projects Pharmacy Management System Parameter index.php editManager sql injection	Aug 25, 2024 2y ago
CVE-2024-8137	medium	5.3/10	SourceCodester Record Management System search_user.php cross site scripting	Aug 24, 2024 2y ago
CVE-2024-8136	medium	5.3/10	SourceCodester Record Management System sort1_user.php cross site scripting	Aug 24, 2024 2y ago
CVE-2024-7656	high	8.8/10	Image Hotspot by DevVN <= 1.2.5 - Authenticated (Author+) PHP Object Injection	Aug 24, 2024 2y ago
CVE-2024-7351	high	7.2/10	Simple Job Board <= 2.12.3 - Authenticated (Editor+) PHP Object Injection	Aug 24, 2024 2y ago
CVE-2024-7954	critical	9.8/10	SPIP porte_plume Plugin Arbitrary PHP Execution	Aug 23, 2024 2y ago