Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

348,965

All time

Critical · Active

12,189

CVSS ≥ 9.0

New · 14 days

3,236

Newly disclosed

Feed last synced

5 hrs ago

Data freshness

Showing 6931–6960 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2024-1026	low	3.5/10	Cogites eReserv config.php cross site scripting	Jan 30, 2024 2y ago
CVE-2024-1022	low	2.4/10	CodeAstro Simple Student Result Management System Add Class Page add_classes.php cross site scripting	Jan 29, 2024 2y ago
CVE-2024-1011	medium	4.3/10	SourceCodester Employee Management System Leave delete-leave.php access control	Jan 29, 2024 2y ago
CVE-2024-1010	low	3.5/10	SourceCodester Employee Management System edit-profile.php cross site scripting	Jan 29, 2024 2y ago
CVE-2024-1009	high	7.3/10	SourceCodester Employee Management System login.php sql injection	Jan 29, 2024 2y ago
CVE-2024-1008	medium	4.7/10	SourceCodester Employee Management System Profile Page edit-photo.php unrestricted upload	Jan 29, 2024 2y ago
CVE-2024-1007	medium	6.3/10	SourceCodester Employee Management System edit_profile.php sql injection	Jan 29, 2024 2y ago
CVE-2024-1006	high	7.3/10	Shanxi Diankeyun Technology NODERP Cookie common.php improper authentication	Jan 29, 2024 2y ago
CVE-2024-0989	medium	5.4/10	Sichuan Yougou Technology KuERP Service.php del_sn_db path traversal	Jan 29, 2024 2y ago
CVE-2024-0988	medium	6.3/10	Sichuan Yougou Technology KuERP common.php checklogin improper authentication	Jan 29, 2024 2y ago
CVE-2024-0958	low	3.5/10	CodeAstro Stock Management System Add Category index.php cross site scripting	Jan 27, 2024 2y ago
CVE-2024-0946	high	7.3/10	60IndexPage Parameter index.php server-side request forgery	Jan 26, 2024 2y ago
CVE-2024-0945	high	7.3/10	60IndexPage Parameter file.php server-side request forgery	Jan 26, 2024 2y ago
CVE-2024-0939	medium	6.3/10	Byzoro Smart S210 Management Platform uploadfile.php unrestricted upload	Jan 26, 2024 2y ago
CVE-2024-0938	medium	5.5/10	Tongda OA 2017 delete_webmail.php sql injection	Jan 26, 2024 2y ago
CVE-2024-0933	medium	6.3/10	Niushop B2B2C Upload.php unrestricted upload	Jan 26, 2024 2y ago
CVE-2024-0884	medium	4.7/10	SourceCodester Online Tours & Travels Management System payment.php exec sql injection	Jan 25, 2024 2y ago
CVE-2024-0883	medium	6.3/10	SourceCodester Online Tours & Travels Management System pay.php prepare sql injection	Jan 25, 2024 2y ago
CVE-2024-22284	high	8.7/10	WordPress Asgaros Forum Plugin <= 2.7.2 is vulnerable to PHP Object Injection	Jan 24, 2024 2y ago
CVE-2024-22309	high	8.7/10	WordPress ChatBot Plugin <= 5.1.0 is vulnerable to PHP Object Injection	Jan 24, 2024 2y ago
CVE-2024-0783	medium	6.3/10	Project Worlds Online Admission System documents.php unrestricted upload	Jan 22, 2024 2y ago
CVE-2024-0782	low	3.5/10	CodeAstro Online Railway Reservation System pass-profile.php cross site scripting	Jan 22, 2024 2y ago
CVE-2024-0781	low	3.5/10	CodeAstro Internet Banking System pages_client_signup.php redirect	Jan 22, 2024 2y ago
CVE-2024-0778	high	8.0/10	Uniview ISC 2500-S VM.php setNatConfig os command injection	Jan 22, 2024 2y ago
CVE-2024-0773	low	3.5/10	CodeAstro Internet Banking System pages_client_signup.php cross site scripting	Jan 21, 2024 2y ago
CVE-2024-0739	high	7.3/10	Hecheng Leadshop leadshop.php deserialization	Jan 19, 2024 2y ago
CVE-2024-0735	medium	6.3/10	SourceCodester Online Tours & Travels Management System expense.php exec sql injection	Jan 19, 2024 2y ago
CVE-2024-0734	medium	6.3/10	Smsot get.php sql injection	Jan 19, 2024 2y ago
CVE-2024-0733	medium	6.3/10	Smsot HTTP POST Request api.php sql injection	Jan 19, 2024 2y ago
CVE-2024-0730	medium	6.3/10	Project Worlds Online Time Table Generator course_ajax.php sql injection	Jan 19, 2024 2y ago