Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,805

All time

Critical · Active

12,186

CVSS ≥ 9.0

New · 14 days

3,112

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 6061–6090 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-7165	medium	5.3/10	SourceCodester School Fees Payment System view_payment.php sql injection	Jul 28, 2024 2y ago
CVE-2024-7163	medium	5.3/10	SeaCMS index.php cross site scripting	Jul 28, 2024 2y ago
CVE-2024-7153	medium	6.9/10	Netgear WN604 siteSurvey.php direct request	Jul 27, 2024 2y ago
CVE-2024-6152	high	8.8/10	Flipbox Builder <= 1.5 - Authenticated (Contributor+) PHP Object Injection	Jul 27, 2024 2y ago
CVE-2024-7120	medium	5.3/10	Raisecom MSG1200/MSG2100E/MSG2200/MSG2300 Web Interface list_base_config.php os command injection	Jul 26, 2024 2y ago
CVE-2024-7119	medium	5.3/10	MD-MAFUJUL-HASAN Online-Payroll-Management-System employee_viewmore.php sql injection	Jul 26, 2024 2y ago
CVE-2024-7118	medium	5.3/10	MD-MAFUJUL-HASAN Online-Payroll-Management-System department_viewmore.php sql injection	Jul 26, 2024 2y ago
CVE-2024-7117	medium	5.3/10	MD-MAFUJUL-HASAN Online-Payroll-Management-System shift_viewmore.php sql injection	Jul 26, 2024 2y ago
CVE-2024-7116	medium	5.3/10	MD-MAFUJUL-HASAN Online-Payroll-Management-System branch_viewmore.php sql injection	Jul 26, 2024 2y ago
CVE-2024-7115	medium	5.3/10	MD-MAFUJUL-HASAN Online-Payroll-Management-System designation_viewmore.php sql injection	Jul 26, 2024 2y ago
CVE-2024-7114	medium	5.3/10	Tianchoy Blog so.php sql injection	Jul 26, 2024 2y ago
CVE-2024-7081	medium	5.3/10	itsourcecode Tailoring Management System expcatadd.php sql injection	Jul 24, 2024 2y ago
CVE-2024-7067	medium	5.3/10	kirilkirkov Ecommerce-Laravel-Bootstrap Cart.php getCartProductsIds deserialization	Jul 24, 2024 2y ago
CVE-2024-7066	medium	6.9/10	F-logic DataCube3 HTTP POST Request config_time_sync.php os command injection	Jul 24, 2024 2y ago
CVE-2024-6970	medium	5.3/10	itsourcecode Tailoring Management System staffcatadd.php sql injection	Jul 22, 2024 2y ago
CVE-2024-6969	medium	5.3/10	SourceCodester Clinics Patient Management System get_patient_history.php sql injection	Jul 22, 2024 2y ago
CVE-2024-6968	medium	5.3/10	SourceCodester Clinics Patient Management System print_patients_visits.php sql injection	Jul 22, 2024 2y ago
CVE-2024-6966	medium	6.9/10	itsourcecode Online Blood Bank Management System Login login.php sql injection	Jul 22, 2024 2y ago
CVE-2024-6958	medium	5.3/10	itsourcecode University Management System Avatar File st_update.php unrestricted upload	Jul 21, 2024 2y ago
CVE-2024-6957	medium	6.9/10	itsourcecode University Management System Login functions.php sql injection	Jul 21, 2024 2y ago
CVE-2024-6956	medium	5.3/10	itsourcecode University Management System view_cgpa.php sql injection	Jul 21, 2024 2y ago
CVE-2024-6955	medium	5.3/10	SourceCodester Record Management System sort2.php cross site scripting	Jul 21, 2024 2y ago
CVE-2024-6954	medium	5.3/10	SourceCodester Record Management System sort1.php cross site scripting	Jul 21, 2024 2y ago
CVE-2024-6953	medium	5.3/10	itsourcecode Tailoring Management System sms.php sql injection	Jul 21, 2024 2y ago
CVE-2024-6951	medium	5.3/10	SourceCodester Simple Online Book Store System admin_delete.php sql injection	Jul 21, 2024 2y ago
CVE-2024-6948	medium	5.3/10	Gargaj wuhu Slide Editor slideeditor.php unrestricted upload	Jul 21, 2024 2y ago
CVE-2024-6947	medium	5.1/10	Flute CMS Notification ContentParser.php replaceContent code injection	Jul 21, 2024 2y ago
CVE-2024-5726	high	8.8/10	Timeline Event History <= 3.1 - Authenticated (Contributor+) PHP Object Injection	Jul 18, 2024 2y ago
CVE-2024-39914	critical	9.8/10	FOG has a command injection in /fog/management/export.php?filename=	Jul 12, 2024 2y ago
CVE-2016-15039	medium	5.3/10	mhuertos phpLDAPadmin ajax_functions.js makeHttpRequest request smuggling	Jul 11, 2024 2y ago