Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,032

All time

Critical · Active

12,193

CVSS ≥ 9.0

New · 14 days

3,303

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 7261–7290 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-6465	medium	4.3/10	PHPGurukul Nipah Virus Testing Management System registered-user-testing.php cross site scripting	Dec 2, 2023 2y ago
CVE-2023-6464	medium	6.3/10	SourceCodester User Registration and Login System add-user.php sql injection	Dec 2, 2023 2y ago
CVE-2023-6463	low	3.5/10	SourceCodester User Registration and Login System add-user.php cross site scripting	Dec 1, 2023 2y ago
CVE-2023-6462	low	3.5/10	SourceCodester User Registration and Login System delete-user.php cross site scripting	Dec 1, 2023 2y ago
CVE-2023-6442	low	3.5/10	PHPGurukul Nipah Virus Testing Management System add-phlebotomist.php cross site scripting	Nov 30, 2023 2y ago
CVE-2023-6440	low	3.5/10	SourceCodester Book Borrower System add-book.php cross site scripting	Nov 30, 2023 2y ago
CVE-2023-6402	medium	6.3/10	PHPGurukul Nipah Virus Testing Management System add-phlebotomist.php sql injection	Nov 30, 2023 2y ago
CVE-2023-6027	medium	6.1/10	Cross-site Scripting vulnerability in PHPMemcachedAdmin	Nov 30, 2023 2y ago
CVE-2023-6026	critical	9.8/10	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in PHPMemcachedAdmin	Nov 30, 2023 2y ago
CVE-2023-6312	medium	4.7/10	SourceCodester Loan Management System Users Page deleteUser.php delete_user sql injection	Nov 27, 2023 2y ago
CVE-2023-6311	medium	4.7/10	SourceCodester Loan Management System Loan Type Page delete_ltype.php delete_ltype sql injection	Nov 27, 2023 2y ago
CVE-2023-6310	medium	4.7/10	SourceCodester Loan Management System deleteBorrower.php delete_borrower sql injection	Nov 27, 2023 2y ago
CVE-2023-6309	medium	5.5/10	moses-smt mosesdecoder trans_result.php os command injection	Nov 27, 2023 2y ago
CVE-2023-6306	medium	6.3/10	SourceCodester Free and Open Source Inventory Management System member_data.php sql injection	Nov 27, 2023 2y ago
CVE-2023-6305	medium	6.3/10	SourceCodester Free and Open Source Inventory Management System suppliar_data.php sql injection	Nov 27, 2023 2y ago
CVE-2023-6301	low	3.5/10	SourceCodester Best Courier Management System GET Parameter parcel_list.php cross site scripting	Nov 26, 2023 2y ago
CVE-2023-6297	medium	4.3/10	PHPGurukul Nipah Virus Testing Management System Search Report Page patient-search-report.php cross site scripting	Nov 26, 2023 2y ago
CVE-2023-6276	medium	6.3/10	Tongda OA 2017 delete.php sql injection	Nov 24, 2023 2y ago
CVE-2023-6274	medium	6.3/10	Byzoro Smart S80 PHP File updatelib.php unrestricted upload	Nov 24, 2023 2y ago
CVE-2023-41790	high	7.6/10	Traversal Path on PHP file	Nov 23, 2023 2y ago
CVE-2023-2497	high	8.8/10	UserPro <= 5.1.0 - Cross-Site Request Forgery to PHP Object Injection	Nov 22, 2023 2y ago
CVE-2023-26542	medium	5.4/10	WordPress phpinfo() WP Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF)	Nov 22, 2023 2y ago
CVE-2023-5340	—	—	Five Star Restaurant Menu and Food Ordering < 2.4.11 - Unauthenticated PHP Object Injection	Nov 20, 2023 2y ago
CVE-2023-6188	medium	4.7/10	GetSimpleCMS theme-edit.php code injection	Nov 17, 2023 2y ago
CVE-2023-6084	medium	6.3/10	Tongda OA 2017 delete.php sql injection	Nov 12, 2023 2y ago
CVE-2023-5959	medium	4.3/10	Byzoro Smart S85F Management Platform login.php password recovery	Nov 11, 2023 2y ago
CVE-2023-6076	medium	5.3/10	PHPGurukul Restaurant Table Booking System Reservation Status booking-details.php information disclosure	Nov 10, 2023 2y ago
CVE-2023-6075	low	3.5/10	PHPGurukul Restaurant Table Booking System Reservation Request index.php cross site scripting	Nov 10, 2023 2y ago
CVE-2023-6074	medium	6.3/10	PHPGurukul Restaurant Table Booking System Booking Reservation check-status.php sql injection	Nov 10, 2023 2y ago
CVE-2023-6054	medium	5.5/10	Tongda OA 2017 lock.php sql injection	Nov 9, 2023 2y ago