Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,032

All time

Critical · Active

12,193

CVSS ≥ 9.0

New · 14 days

3,301

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 7291–7320 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-6053	medium	6.3/10	Tongda OA 2017 delete.php sql injection	Nov 9, 2023 2y ago
CVE-2023-6052	medium	6.3/10	Tongda OA 2017 delete.php sql injection	Nov 9, 2023 2y ago
CVE-2021-4431	low	3.5/10	msyk FMDataAPI FMDataAPI_Sample.php cross site scripting	Nov 7, 2023 2y ago
CVE-2019-25156	low	3.5/10	dstar2018 Agency search.php cross site scripting	Nov 7, 2023 2y ago
CVE-2017-20187	low	3.5/10	Magnesium-PHP Base.php formatEmailString injection	Nov 5, 2023 2y ago
CVE-2023-5930	low	3.5/10	Campcodes Simple Student Information System manage_academic.php cross site scripting	Nov 2, 2023 2y ago
CVE-2023-5929	medium	5.5/10	Campcodes Simple Student Information System manage_academic.php sql injection	Nov 2, 2023 2y ago
CVE-2023-5928	medium	5.5/10	Campcodes Simple Student Information System manage_department.php sql injection	Nov 2, 2023 2y ago
CVE-2023-5927	medium	5.5/10	Campcodes Simple Student Information System manage_course.php sql injection	Nov 2, 2023 2y ago
CVE-2023-5926	medium	5.5/10	Campcodes Simple Student Information System update_status.php sql injection	Nov 2, 2023 2y ago
CVE-2023-5925	medium	5.5/10	Campcodes Simple Student Information System Master.php sql injection	Nov 2, 2023 2y ago
CVE-2023-5924	medium	5.5/10	Campcodes Simple Student Information System view_course.php sql injection	Nov 2, 2023 2y ago
CVE-2023-5923	medium	5.5/10	Campcodes Simple Student Information System index.php sql injection	Nov 2, 2023 2y ago
CVE-2022-4900	medium	6.2/10	Potential buffer overflow in php_cli_server_startup_workers	Nov 2, 2023 2y ago
CVE-2023-42802	critical	10.0/10	GLPI vulnerable to unallowed PHP script execution	Nov 2, 2023 2y ago
CVE-2023-5918	medium	6.3/10	SourceCodester Visitor Management System manage_user.php sql injection	Nov 2, 2023 2y ago
CVE-2023-5917	low	2.4/10	phpBB Smiley Pack acp_icons.php main cross site scripting	Nov 2, 2023 2y ago
CVE-2023-5910	low	2.6/10	PopojiCMS Web Config install.php cross site scripting	Nov 1, 2023 2y ago
CVE-2023-5866	medium	6.3/10	Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq	Oct 31, 2023 2y ago
CVE-2023-5867	medium	4.6/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Oct 31, 2023 2y ago
CVE-2023-5865	high	7.6/10	Insufficient Session Expiration in thorsten/phpmyfaq	Oct 31, 2023 2y ago
CVE-2023-5864	high	7.4/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Oct 31, 2023 2y ago
CVE-2023-5863	high	7.4/10	Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq	Oct 31, 2023 2y ago
CVE-2023-5199	critical	9.9/10	PHP to Page <= 0.3 - Authenticated (Subscriber+) Local File Inclusion to Remote Code Execution via Shortcode	Oct 30, 2023 2y ago
CVE-2023-5583	high	8.8/10	WP Simple Galleries <= 1.34 - Authenticated (Contributor+) PHP Object Injection	Oct 30, 2023 2y ago
CVE-2007-10003	medium	6.3/10	The Hackers Diet Plugin HTTP POST Request ajax_blurb.php sql injection	Oct 29, 2023 2y ago
CVE-2005-10002	medium	5.5/10	almosteffortless secure-files Plugin secure-files.php sf_downloads path traversal	Oct 29, 2023 2y ago
CVE-2023-5837	low	3.5/10	AlexanderLivanov FotosCMS2 Cookie profile.php cross site scripting	Oct 28, 2023 2y ago
CVE-2023-5835	low	3.5/10	hu60t hu60wap6 ubbparser.php markdown cross site scripting	Oct 28, 2023 2y ago
CVE-2023-5829	medium	6.3/10	code-projects Admission Management System student_avatar.php unrestricted upload	Oct 27, 2023 2y ago