Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,032

All time

Critical · Active

12,193

CVSS ≥ 9.0

New · 14 days

3,303

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 7231–7260 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-6654	medium	6.3/10	PHPEMS Session Data session.cls.php deserialization	Dec 10, 2023 2y ago
CVE-2023-6653	medium	4.3/10	PHPGurukul Teacher Subject Allocation Management System Create a new Subject subject.php cross-site request forgery	Dec 10, 2023 2y ago
CVE-2023-6652	high	7.3/10	code-projects Matrimonial Site register.php register sql injection	Dec 10, 2023 2y ago
CVE-2023-6650	medium	4.3/10	SourceCodester Simple Invoice Generator System login.php cross site scripting	Dec 10, 2023 2y ago
CVE-2023-6649	medium	4.3/10	PHPGurukul Teacher Subject Allocation Management System index.php cross site scripting	Dec 10, 2023 2y ago
CVE-2023-6648	medium	6.9/10	PHPGurukul Nipah Virus Testing Management System password-recovery.php sql injection	Dec 10, 2023 2y ago
CVE-2023-6619	medium	5.5/10	SourceCodester Simple Student Attendance System class_form.php sql injection	Dec 8, 2023 2y ago
CVE-2023-6618	medium	5.5/10	SourceCodester Simple Student Attendance System index.php file inclusion	Dec 8, 2023 2y ago
CVE-2023-6617	medium	5.5/10	SourceCodester Simple Student Attendance System attendance.php sql injection	Dec 8, 2023 2y ago
CVE-2023-6616	low	3.5/10	SourceCodester Simple Student Attendance System index.php cross site scripting	Dec 8, 2023 2y ago
CVE-2023-6615	low	3.5/10	Typecho manage-users.php information disclosure	Dec 8, 2023 2y ago
CVE-2023-6614	low	2.7/10	Typecho Page manage-pages.php backdoor	Dec 8, 2023 2y ago
CVE-2023-6613	low	2.4/10	Typecho Logo options-theme.php cross site scripting	Dec 8, 2023 2y ago
CVE-2023-6611	medium	5.5/10	Tongda OA 2017 delete.php sql injection	Dec 8, 2023 2y ago
CVE-2023-6608	medium	5.5/10	Tongda OA 2017 delete.php sql injection	Dec 8, 2023 2y ago
CVE-2023-6607	medium	5.5/10	Tongda OA 2017 delete.php sql injection	Dec 8, 2023 2y ago
CVE-2023-6581	medium	5.5/10	D-Link DAR-7000 workidajax.php sql injection	Dec 7, 2023 2y ago
CVE-2023-6577	medium	4.3/10	Byzoro PatrolFlow 2530Pro mailsendview.php path traversal	Dec 7, 2023 2y ago
CVE-2023-6576	medium	6.3/10	Byzoro S210 HTTP POST Request uploadfile.php unrestricted upload	Dec 7, 2023 2y ago
CVE-2023-6575	medium	6.3/10	Byzoro S210 HTTP POST Request repair.php sql injection	Dec 7, 2023 2y ago
CVE-2023-6574	medium	6.3/10	Byzoro Smart S20 HTTP POST Request updateos.php unrestricted upload	Dec 7, 2023 2y ago
CVE-2023-5711	medium	4.3/10	System Dashboard <= 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info)	Dec 7, 2023 2y ago
CVE-2023-49283	medium	5.4/10	Test code in published microsoft-graph-core package exposes phpinfo()	Dec 5, 2023 2y ago
CVE-2023-49282	medium	5.4/10	Test code in published microsoft-graph package exposes phpinfo()	Dec 5, 2023 2y ago
CVE-2023-5952	—	—	Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object Injection	Dec 4, 2023 2y ago
CVE-2022-4957	low	3.5/10	librespeed speedtest stats.php cross site scripting	Dec 3, 2023 2y ago
CVE-2018-25094	low	3.5/10	ระบบบัญชีออนไลน์ Online Accounting System image.php path traversal	Dec 3, 2023 2y ago
CVE-2023-6474	medium	4.3/10	PHPGurukul Nipah Virus Testing Management System manage-phlebotomist.php cross-site request forgery	Dec 2, 2023 2y ago
CVE-2023-6473	low	3.5/10	SourceCodester Online Quiz System take-quiz.php cross site scripting	Dec 2, 2023 2y ago
CVE-2023-6472	low	2.4/10	PHPEMS Content Section api.cls.php cross site scripting	Dec 2, 2023 2y ago