Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,032

All time

Critical · Active

12,193

CVSS ≥ 9.0

New · 14 days

3,299

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 7741–7770 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-2660	medium	6.3/10	SourceCodester Online Computer and Laptop Store view_categories.php sql injection	May 11, 2023 3y ago
CVE-2023-2659	medium	6.3/10	SourceCodester Online Computer and Laptop Store view_product.php sql injection	May 11, 2023 3y ago
CVE-2023-2658	medium	6.3/10	SourceCodester Online Computer and Laptop Store products.php sql injection	May 11, 2023 3y ago
CVE-2023-2657	low	3.5/10	SourceCodester Online Computer and Laptop Store products.php cross site scripting	May 11, 2023 3y ago
CVE-2023-2653	medium	6.3/10	SourceCodester Lost and Found Information System index.php sql injection	May 11, 2023 3y ago
CVE-2023-2648	medium	6.3/10	Weaver E-Office uploadify.php unrestricted upload	May 11, 2023 3y ago
CVE-2023-2647	medium	6.3/10	Weaver E-Office File Upload utility_all.php command injection	May 11, 2023 3y ago
CVE-2023-2643	medium	6.3/10	SourceCodester File Tracker Manager System POST Parameter update_password.php sql injection	May 11, 2023 3y ago
CVE-2023-2642	medium	6.3/10	SourceCodester Online Exam System GET Parameter updateCourse.php sql injection	May 11, 2023 3y ago
CVE-2023-2641	high	7.3/10	SourceCodester Online Internship Management System POST Parameter login.php sql injection	May 11, 2023 3y ago
CVE-2023-2619	medium	6.3/10	SourceCodester Online Tours & Travels Management System disapprove_delete.php exec sql injection	May 10, 2023 3y ago
CVE-2023-2596	medium	6.3/10	SourceCodester Online Reviewer System GET Parameter user-update.php sql injection	May 9, 2023 3y ago
CVE-2023-2595	medium	6.3/10	SourceCodester Billing Management System POST Parameter ajax_service.php sql injection	May 9, 2023 3y ago
CVE-2023-30855	medium	6.5/10	Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php	May 8, 2023 3y ago
CVE-2023-1347	—	—	Customizer Export/Import < 0.9.6 - Admin+ PHP Object Injection	May 8, 2023 3y ago
CVE-2023-1650	—	—	ChatBot < 4.4.7 - Unauthenticated PHP Object Injection	May 8, 2023 3y ago
CVE-2023-2565	low	3.5/10	SourceCodester Multi Language Hotel Management Software POST Parameter ajax.php cross site scripting	May 7, 2023 3y ago
CVE-2016-15031	high	7.3/10	PHP-Login POST Parameter class.loginscript.php checkLogin sql injection	May 6, 2023 3y ago
CVE-2017-20183	low	3.5/10	External Media without Import Plugin external-media-without-import.php print_media_new_panel cross site scripting	May 5, 2023 3y ago
CVE-2023-2551	high	7.2/10	PHP Remote File Inclusion in unilogies/bumsys	May 5, 2023 3y ago
CVE-2023-2550	high	8.2/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	May 5, 2023 3y ago
CVE-2023-2427	medium	6.1/10	Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq	May 5, 2023 3y ago
CVE-2023-2477	low	3.5/10	Funadmin Cx.php tagLoad cross site scripting	May 2, 2023 3y ago
CVE-2023-1196	—	—	Advanced Custom Fields - Contributor+ PHP Object Injection	May 2, 2023 3y ago
CVE-2023-1669	—	—	SEOPress < 6.5.0.3 - Admin+ PHP Object Injection	May 2, 2023 3y ago
CVE-2013-10026	low	3.5/10	Mail Subscribe List Plugin index.php cross site scripting	May 2, 2023 3y ago
CVE-2023-2451	medium	6.3/10	SourceCodester Online DJ Management System GET Parameter view_details.php sql injection	May 1, 2023 3y ago
CVE-2015-10105	medium	6.3/10	IP Blacklist Cloud Plugin CSV File Import ip_blacklist_cloud.php valid_js_identifier path traversal	May 1, 2023 3y ago
CVE-2015-10104	low	3.5/10	Icons for Features Plugin class-icons-for-features-admin.php redirect	Apr 30, 2023 3y ago
CVE-2023-2429	medium	6.6/10	Improper Access Control in thorsten/phpmyfaq	Apr 30, 2023 3y ago