Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,805

All time

Critical · Active

12,186

CVSS ≥ 9.0

New · 14 days

3,112

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 5941–5970 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-7668	medium	5.3/10	SourceCodester Car Driving School Management System Master.php delete_package sql injection	Aug 11, 2024 2y ago
CVE-2024-7667	medium	5.3/10	SourceCodester Car Driving School Management System User.php delete_users sql injection	Aug 11, 2024 2y ago
CVE-2024-7666	medium	5.3/10	SourceCodester Car Driving School Management System view_package.php sql injection	Aug 11, 2024 2y ago
CVE-2024-7665	medium	5.3/10	SourceCodester Car Driving School Management System manage_package.php sql injection	Aug 11, 2024 2y ago
CVE-2024-7664	medium	5.3/10	SourceCodester Car Driving School Management System view_details.php sql injection	Aug 11, 2024 2y ago
CVE-2024-7663	medium	5.3/10	SourceCodester Car Driving School Management System manage_user.php sql injection	Aug 11, 2024 2y ago
CVE-2024-7662	medium	6.9/10	SourceCodester Car Driving School Management System manag_package.php save_package cross-site request forgery	Aug 11, 2024 2y ago
CVE-2024-7661	medium	6.9/10	SourceCodester Car Driving School Management System index.php save_users cross-site request forgery	Aug 11, 2024 2y ago
CVE-2024-7659	medium	6.3/10	projectsend Password Reset Token functions.php generate_random_string random values	Aug 11, 2024 2y ago
CVE-2024-7658	medium	6.9/10	projectsend process.php get_preview resource injection	Aug 11, 2024 2y ago
CVE-2024-7645	medium	6.9/10	SourceCodester Clinics Patient Management System User Page users.php cross-site request forgery	Aug 9, 2024 2y ago
CVE-2024-7644	medium	5.3/10	SourceCodester Leads Manager Tool Add Leads add-leads.php cross site scripting	Aug 9, 2024 2y ago
CVE-2024-7643	medium	5.3/10	SourceCodester Leads Manager Tool Delete Leads delete-leads.php sql injection	Aug 9, 2024 2y ago
CVE-2024-7642	medium	5.3/10	SourceCodester Kortex Lite Advocate Office Management System activate_act.php sql injection	Aug 9, 2024 2y ago
CVE-2024-7641	medium	5.3/10	SourceCodester Kortex Lite Advocate Office Management System deactivate_act.php sql injection	Aug 9, 2024 2y ago
CVE-2024-7640	medium	5.3/10	SourceCodester Kortex Lite Advocate Office Management System delete_register.php sql injection	Aug 9, 2024 2y ago
CVE-2024-7639	medium	5.3/10	SourceCodester Kortex Lite Advocate Office Management System delete_act.php sql injection	Aug 9, 2024 2y ago
CVE-2024-7638	medium	5.3/10	SourceCodester Kortex Lite Advocate Office Management System delete_client.php sql injection	Aug 9, 2024 2y ago
CVE-2024-7637	medium	6.9/10	code-projects Online Polling Registration registeracc.php sql injection	Aug 9, 2024 2y ago
CVE-2024-7636	medium	6.9/10	code-projects Simple Ticket Booking Login authenticate.php sql injection	Aug 9, 2024 2y ago
CVE-2024-7635	medium	6.9/10	code-projects Simple Ticket Booking Registration register_insert.php sql injection	Aug 9, 2024 2y ago
CVE-2024-7410	medium	5.3/10	My Custom CSS PHP & ADS <= 3.3 - Unauthenticated Full Path Disclosure	Aug 9, 2024 2y ago
CVE-2024-7486	high	8.8/10	MultiPurpose <= 1.2.0 - Authenticated (Contributor+) PHP Object Injection	Aug 8, 2024 2y ago
CVE-2024-7560	high	7.2/10	News Flash <= 1.1.0 - Authenticated (Editor+) PHP Object Injection	Aug 8, 2024 2y ago
CVE-2024-7561	high	8.8/10	The Next <= 1.1.0 - Authenticated (Contributor+) PHP Object Injection	Aug 8, 2024 2y ago
CVE-2024-7578	medium	6.9/10	Alien Technology ALR-F800 cmd.php improper authorization	Aug 7, 2024 2y ago
CVE-2024-7506	medium	5.3/10	itsourcecode Tailoring Management System setlogo.php unrestricted upload	Aug 6, 2024 2y ago
CVE-2024-7505	medium	6.9/10	itsourcecode Bike Delivery System contact_us_action.php sql injection	Aug 6, 2024 2y ago
CVE-2024-7500	medium	5.3/10	itsourcecode Airline Reservation System admin_class.php save_settings unrestricted upload	Aug 6, 2024 2y ago
CVE-2024-7499	medium	5.3/10	itsourcecode Airline Reservation System flights.php sql injection	Aug 6, 2024 2y ago