Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,965

All time

Critical · Active

12,189

CVSS ≥ 9.0

New · 14 days

3,271

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 6181–6210 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-33999	—	—	moodle: unsafe direct use of $_SERVER['HTTP_REFERER'] in admin/tool/mfa/index.php	May 31, 2024 2y ago
CVE-2024-5519	medium	6.9/10	ItsourceCode Learning Management System Project In PHP login.php sql injection	May 30, 2024 2y ago
CVE-2024-5518	medium	5.3/10	itsourcecode Online Discussion Forum change_profile_picture.php unrestricted upload	May 30, 2024 2y ago
CVE-2024-5517	medium	6.9/10	itsourcecode Online Blood Bank Management System changepwd.php sql injection	May 30, 2024 2y ago
CVE-2024-5516	medium	5.3/10	itsourcecode Online Blood Bank Management System massage.php sql injection	May 30, 2024 2y ago
CVE-2024-5515	medium	5.3/10	SourceCodester Stock Management System createBrand.php sql injection	May 30, 2024 2y ago
CVE-2024-35226	high	7.3/10	PHP Code Injection by malicious attribute in extends-tag in Smarty	May 28, 2024 2y ago
CVE-2024-5415	high	7.1/10	Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro	May 28, 2024 2y ago
CVE-2024-5414	high	7.1/10	Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro	May 28, 2024 2y ago
CVE-2024-5413	high	7.1/10	Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro	May 28, 2024 2y ago
CVE-2024-5397	medium	5.3/10	itsourcecode Online Student Enrollment System instructorSubjects.php sql injection	May 27, 2024 2y ago
CVE-2024-5396	medium	5.3/10	itsourcecode Online Student Enrollment System newfaculty.php sql injection	May 27, 2024 2y ago
CVE-2024-5395	medium	5.3/10	itsourcecode Online Student Enrollment System listofinstructor.php sql injection	May 27, 2024 2y ago
CVE-2024-5394	medium	5.3/10	itsourcecode Online Student Enrollment System newDept.php sql injection	May 27, 2024 2y ago
CVE-2024-5393	medium	5.3/10	itsourcecode Online Student Enrollment System listofcourse.php sql injection	May 27, 2024 2y ago
CVE-2024-5392	medium	5.3/10	itsourcecode Online Student Enrollment System editSubject.php sql injection	May 27, 2024 2y ago
CVE-2024-5391	medium	5.3/10	itsourcecode Online Student Enrollment System listofsubject.php sql injection	May 27, 2024 2y ago
CVE-2024-5390	medium	5.3/10	itsourcecode Online Student Enrollment System listofstudent.php sql injection	May 27, 2024 2y ago
CVE-2024-5384	medium	6.9/10	SourceCodester Facebook News Feed Like index.php sql injection	May 26, 2024 2y ago
CVE-2024-5381	medium	5.3/10	itsourcecode Student Information Management System view.php sql injection	May 26, 2024 2y ago
CVE-2024-5380	medium	5.3/10	jsy-1 short-url admin.php cross site scripting	May 26, 2024 2y ago
CVE-2024-5378	medium	5.3/10	SourceCodester School Intramurals Student Attendance Management System manage_sy.php sql injection	May 26, 2024 2y ago
CVE-2024-5377	medium	6.9/10	SourceCodester Vehicle Management System newvehicle.php unrestricted upload	May 26, 2024 2y ago
CVE-2024-5376	medium	5.3/10	Kashipara College Management System view_each_faculty.php cross site scripting	May 26, 2024 2y ago
CVE-2024-5375	medium	5.3/10	Kashipara College Management System submit_student.php cross site scripting	May 26, 2024 2y ago
CVE-2024-5374	medium	5.3/10	Kashipara College Management System submit_new_faculty.php cross site scripting	May 26, 2024 2y ago
CVE-2024-5373	medium	5.3/10	Kashipara College Management System submit_login.php cross site scripting	May 26, 2024 2y ago
CVE-2024-5372	medium	5.3/10	Kashipara College Management System submit_extracurricular_activity.php cross site scripting	May 26, 2024 2y ago
CVE-2024-5371	medium	5.3/10	Kashipara College Management System submit_enroll_student.php cross site scripting	May 26, 2024 2y ago
CVE-2024-5370	medium	5.3/10	Kashipara College Management System submit_enroll_staff.php cross site scripting	May 26, 2024 2y ago