Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,965

All time

Critical · Active

12,189

CVSS ≥ 9.0

New · 14 days

3,236

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 6841–6870 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-1928	medium	4.7/10	SourceCodester Web-Based Student Clearance System Edit User Profile Page edit-admin.php sql injection	Feb 27, 2024 2y ago
CVE-2024-1927	medium	6.3/10	SourceCodester Web-Based Student Clearance System login.php sql injection	Feb 27, 2024 2y ago
CVE-2024-1926	medium	6.3/10	SourceCodester Free and Open Source Inventory Management System search_sales_report.php sql injection	Feb 27, 2024 2y ago
CVE-2024-1925	medium	5.0/10	Ctcms Upsys.php unrestricted upload	Feb 27, 2024 2y ago
CVE-2024-1924	medium	6.3/10	CodeAstro Membership Management System get_membership_amount.php sql injection	Feb 27, 2024 2y ago
CVE-2024-1923	medium	6.3/10	SourceCodester Simple Student Attendance System List of Classes Page ajax-api.php delete_student sql injection	Feb 27, 2024 2y ago
CVE-2024-1922	low	3.5/10	SourceCodester Online Job Portal Manage Job Page ManageJob.php cross site scripting	Feb 27, 2024 2y ago
CVE-2024-1921	medium	4.7/10	osuuu LightPicture Setup.php unrestricted upload	Feb 27, 2024 2y ago
CVE-2024-1920	medium	5.6/10	osuuu LightPicture TokenVerify.php handle hard-coded key	Feb 27, 2024 2y ago
CVE-2024-1919	low	3.5/10	SourceCodester Online Job Portal Manage Walkin Page ManageWalkin.php cross site scripting	Feb 27, 2024 2y ago
CVE-2024-1918	medium	4.7/10	Byzoro Smart S42 Management Platform userattestation.php unrestricted upload	Feb 27, 2024 2y ago
CVE-2024-1878	medium	6.3/10	SourceCodester Employee Management System myprofile.php sql injection	Feb 26, 2024 2y ago
CVE-2024-1877	medium	6.3/10	SourceCodester Employee Management System cancel.php sql injection	Feb 26, 2024 2y ago
CVE-2024-1876	high	7.3/10	SourceCodester Employee Management System psubmit.php sql injection	Feb 26, 2024 2y ago
CVE-2024-1875	medium	6.3/10	SourceCodester Complaint Management System Lodge Complaint Section register-complaint.php unrestricted upload	Feb 25, 2024 2y ago
CVE-2024-1871	low	3.5/10	SourceCodester Employee Management System Project Assignment Report assignp.php cross site scripting	Feb 24, 2024 2y ago
CVE-2024-1833	medium	6.9/10	SourceCodester Employee Management System login.php sql injection	Feb 23, 2024 2y ago
CVE-2024-1831	high	7.3/10	SourceCodester Complete File Management System Login Form index.php sql injection	Feb 23, 2024 2y ago
CVE-2024-1830	high	7.3/10	code-projects Library System lost-password.php sql injection	Feb 23, 2024 2y ago
CVE-2024-1829	high	7.3/10	code-projects Library System registration.php sql injection	Feb 23, 2024 2y ago
CVE-2024-1828	high	7.3/10	code-projects Library System registration.php sql injection	Feb 23, 2024 2y ago
CVE-2024-1827	high	7.3/10	code-projects Library System login.php sql injection	Feb 23, 2024 2y ago
CVE-2024-1826	high	7.3/10	code-projects Library System login.php sql injection	Feb 23, 2024 2y ago
CVE-2024-1824	high	7.3/10	CodeAstro House Rental Management System signing.php sql injection	Feb 23, 2024 2y ago
CVE-2024-1823	medium	5.3/10	CodeAstro Simple Voting System Backend users.php access control	Feb 23, 2024 2y ago
CVE-2024-1822	low	2.4/10	PHPGurukul Tourism Management System user-bookings.php cross site scripting	Feb 23, 2024 2y ago
CVE-2024-1821	medium	5.5/10	code-projects Crime Reporting System police_add.php sql injection	Feb 23, 2024 2y ago
CVE-2024-1820	high	7.3/10	code-projects Crime Reporting System inchargelogin.php sql injection	Feb 23, 2024 2y ago
CVE-2024-1817	high	7.3/10	Demososo DM Enterprise Website Building System Cookie indexDM_load.php dmlogin improper authentication	Feb 23, 2024 2y ago
CVE-2024-1784	low	3.9/10	Limbas main_admin.php sql injection	Feb 23, 2024 2y ago