Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,032

All time

Critical · Active

12,193

CVSS ≥ 9.0

New · 14 days

3,301

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 7381–7410 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-5304	low	3.5/10	Online Banquet Booking System Service Booking book-services.php cross site scripting	Sep 30, 2023 2y ago
CVE-2023-5303	low	3.5/10	Online Banquet Booking System Account Detail view-booking-detail.php cross site scripting	Sep 30, 2023 2y ago
CVE-2023-5301	medium	4.7/10	DedeCMS album_add.php AddMyAddon os command injection	Sep 30, 2023 2y ago
CVE-2023-5298	medium	5.5/10	Tongda OA 2017 delete.php sql injection	Sep 30, 2023 2y ago
CVE-2023-5320	critical	9.0/10	Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq	Sep 30, 2023 2y ago
CVE-2023-5317	medium	6.3/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Sep 30, 2023 2y ago
CVE-2023-5316	critical	9.1/10	Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq	Sep 30, 2023 2y ago
CVE-2023-5319	high	8.3/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Sep 30, 2023 2y ago
CVE-2023-5227	medium	6.5/10	Unrestricted Upload of File with Dangerous Type in thorsten/phpmyfaq	Sep 30, 2023 2y ago
CVE-2023-5294	medium	4.7/10	ECshop order.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5293	medium	4.7/10	ECshop leancloud.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5286	low	3.5/10	SourceCodester Expense Tracker App Category add_category.php cross site scripting	Sep 29, 2023 2y ago
CVE-2023-5285	medium	6.3/10	Tongda OA 2017 delete.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5284	medium	6.3/10	SourceCodester Engineers Online Portal upload_save_student.php unrestricted upload	Sep 29, 2023 2y ago
CVE-2023-5283	medium	6.3/10	SourceCodester Engineers Online Portal teacher_signup.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5282	medium	6.3/10	SourceCodester Engineers Online Portal seed_message_student.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5281	medium	6.3/10	SourceCodester Engineers Online Portal remove_inbox_message.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5280	medium	6.3/10	SourceCodester Engineers Online Portal my_students.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5279	medium	6.3/10	SourceCodester Engineers Online Portal my_classmates.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5278	medium	6.3/10	SourceCodester Engineers Online Portal login.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5277	medium	6.3/10	SourceCodester Engineers Online Portal student_avatar.php unrestricted upload	Sep 29, 2023 2y ago
CVE-2023-5276	medium	6.3/10	SourceCodester Engineers Online Portal downloadable_student.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5273	low	3.5/10	SourceCodester Best Courier Management System manage_parcel_status.php cross site scripting	Sep 29, 2023 2y ago
CVE-2023-5272	medium	5.5/10	SourceCodester Best Courier Management System GET Parameter edit_parcel.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5271	medium	5.5/10	SourceCodester Best Courier Management System edit_parcel.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5270	medium	5.5/10	SourceCodester Best Courier Management System view_parcel.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5269	medium	5.1/10	SourceCodester Best Courier Management System GET Parameter parcel_list.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5268	medium	6.3/10	DedeBIZ makehtml_taglist_action.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5267	medium	5.5/10	Tongda OA 2017 delete.php sql injection	Sep 29, 2023 2y ago
CVE-2023-5266	medium	6.3/10	DedeBIZ tags_main.php sql injection	Sep 29, 2023 2y ago