Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,965

All time

Critical · Active

12,189

CVSS ≥ 9.0

New · 14 days

3,236

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 6811–6840 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-2145	low	3.5/10	SourceCodester Online Mobile Management Store update-tracker.php cross site scripting	Mar 3, 2024 2y ago
CVE-2024-2077	medium	6.3/10	SourceCodester Simple Online Bidding System index.php sql injection	Mar 1, 2024 2y ago
CVE-2024-2076	medium	5.3/10	CodeAstro House Rental Management System tenant.php missing authentication	Mar 1, 2024 2y ago
CVE-2024-2075	low	3.5/10	SourceCodester Daily Habit Tracker update-tracker.php cross site scripting	Mar 1, 2024 2y ago
CVE-2024-2073	medium	6.3/10	SourceCodester Block Inserter for Dynamic Content view_post.php sql injection	Mar 1, 2024 2y ago
CVE-2024-2072	low	3.5/10	SourceCodester Flashcard Quiz App update-flashcard.php cross site scripting	Mar 1, 2024 2y ago
CVE-2024-2070	low	3.5/10	SourceCodester FAQ Management System add-faq.php cross site scripting	Mar 1, 2024 2y ago
CVE-2024-2069	medium	6.3/10	SourceCodester FAQ Management System delete-faq.php sql injection	Mar 1, 2024 2y ago
CVE-2024-2068	low	3.5/10	SourceCodester Computer Inventory System update-computer.php cross site scripting	Mar 1, 2024 2y ago
CVE-2024-2067	medium	6.3/10	SourceCodester Computer Inventory System delete-computer.php sql injection	Mar 1, 2024 2y ago
CVE-2024-2066	low	2.4/10	SourceCodester Computer Inventory System add-computer.php cross site scripting	Mar 1, 2024 2y ago
CVE-2024-2065	low	3.5/10	SourceCodester Barangay Population Monitoring System update-resident.php cross site scripting	Mar 1, 2024 2y ago
CVE-2024-2063	low	2.4/10	SourceCodester Petrol Pump Management Software profile_crud.php cross site scripting	Mar 1, 2024 2y ago
CVE-2024-2062	medium	4.7/10	SourceCodester Petrol Pump Management Software edit_categories.php sql injection	Mar 1, 2024 2y ago
CVE-2024-2061	medium	4.7/10	SourceCodester Petrol Pump Management Software edit_supplier.php sql injection	Mar 1, 2024 2y ago
CVE-2024-2060	medium	4.7/10	SourceCodester Petrol Pump Management Software login_crud.php sql injection	Mar 1, 2024 2y ago
CVE-2024-2059	medium	4.7/10	SourceCodester Petrol Pump Management Software service_crud.php unrestricted upload	Mar 1, 2024 2y ago
CVE-2024-2058	medium	4.7/10	SourceCodester Petrol Pump Management Software product.php unrestricted upload	Mar 1, 2024 2y ago
CVE-2024-1859	high	8.8/10	Slider Responsive Slideshow – Image slider, Gallery slideshow <= 1.3.8 - Authenticated (Contributor+) PHP Object Injection	Mar 1, 2024 2y ago
CVE-2024-2022	medium	6.3/10	Netentsec NS-ASG Application Security Gateway list_ipAddressPolicy.php sql injection	Mar 1, 2024 2y ago
CVE-2024-2021	medium	6.3/10	Netentsec NS-ASG Application Security Gateway list_localuser.php sql injection	Feb 29, 2024 2y ago
CVE-2024-2016	medium	6.3/10	ZhiCms setcontroller.php index code injection	Feb 29, 2024 2y ago
CVE-2024-2015	medium	6.3/10	ZhiCms mcontroller.php getindexdata sql injection	Feb 29, 2024 2y ago
CVE-2024-2014	high	7.3/10	Panabit Panalog sprog_upstatus.php sql injection	Feb 29, 2024 2y ago
CVE-2024-2009	medium	5.3/10	Nway Pro Argument index.php ajax_login_submit_form information exposure	Feb 29, 2024 2y ago
CVE-2024-1972	low	3.5/10	SourceCodester Online Job Portal EditProfile.php cross site scripting	Feb 28, 2024 2y ago
CVE-2024-1971	high	7.3/10	Surya2Developer Online Shopping System POST Parameter login.php sql injection	Feb 28, 2024 2y ago
CVE-2024-1970	medium	4.3/10	SourceCodester Online Learning System V2 index.php cross site scripting	Feb 28, 2024 2y ago
CVE-2024-1928	medium	4.7/10	SourceCodester Web-Based Student Clearance System Edit User Profile Page edit-admin.php sql injection	Feb 27, 2024 2y ago
CVE-2024-1927	medium	6.3/10	SourceCodester Web-Based Student Clearance System login.php sql injection	Feb 27, 2024 2y ago