Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,093

All time

Critical · Active

12,197

CVSS ≥ 9.0

New · 14 days

3,342

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 8071–8100 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-1039	high	7.3/10	SourceCodester Class and Exam Timetabling System POST Parameter index3.php sql injection	Feb 26, 2023 3y ago
CVE-2023-1038	medium	6.3/10	SourceCodester Online Reviewer Management System questions-view.php sql injection	Feb 26, 2023 3y ago
CVE-2023-1037	high	7.3/10	SourceCodester Dental Clinic Appointment Reservation System POST Parameter login.php sql injection	Feb 26, 2023 3y ago
CVE-2023-1036	medium	4.3/10	SourceCodester Dental Clinic Appointment Reservation System POST Parameter signup.php cross site scripting	Feb 26, 2023 3y ago
CVE-2019-25105	low	3.5/10	dro.pm fileman.php cross site scripting	Feb 26, 2023 3y ago
CVE-2023-1035	medium	6.3/10	SourceCodester Clinics Patient Management System update_user.php sql injection	Feb 25, 2023 3y ago
CVE-2023-26038	medium	5.4/10	ZoneMinder contains Local File Inclusion vulnerability via `web/ajax/modal.php`	Feb 25, 2023 3y ago
CVE-2023-1030	medium	5.1/10	SourceCodester/code-projects Online Boat Reservation System POST Parameter login.php cross site scripting	Feb 24, 2023 3y ago
CVE-2023-1002	medium	4.3/10	MuYuCMS index.php path traversal	Feb 24, 2023 3y ago
CVE-2023-0998	medium	6.5/10	SourceCodester Alphaware Simple E-Commerce System Payment summary.php access control	Feb 24, 2023 3y ago
CVE-2023-0997	high	7.3/10	SourceCodester Moosikay E-Commerce System POST Parameter order.php sql injection	Feb 24, 2023 3y ago
CVE-2023-0980	medium	6.3/10	SourceCodester Yoga Class Registration System Status Update update_status.php sql injection	Feb 23, 2023 3y ago
CVE-2023-0964	medium	5.0/10	SourceCodester Sales Tracker Management System view_product.php sql injection	Feb 22, 2023 3y ago
CVE-2023-0963	high	7.3/10	SourceCodester Music Gallery Site POST Request Users.php access control	Feb 22, 2023 3y ago
CVE-2023-0962	medium	6.3/10	SourceCodester Music Gallery Site GET Request Master.php sql injection	Feb 22, 2023 3y ago
CVE-2023-0961	medium	6.3/10	SourceCodester Music Gallery Site GET Request view_music_details.php sql injection	Feb 22, 2023 3y ago
CVE-2023-0960	medium	4.7/10	SeaCMS Picture Management config.ftp.php deserialization	Feb 22, 2023 3y ago
CVE-2017-20178	low	3.1/10	Codiad process.php saveJSON information disclosure	Feb 21, 2023 3y ago
CVE-2015-10084	medium	5.5/10	irontec klear-library BaseController.php _prepareWhere sql injection	Feb 21, 2023 3y ago
CVE-2023-0938	medium	6.3/10	SourceCodester Music Gallery Site GET Request music_list.php sql injection	Feb 21, 2023 3y ago
CVE-2023-0935	medium	6.3/10	DolphinPHP Incomplete Fix CVE-2021-46097 common.php os command injection	Feb 21, 2023 3y ago
CVE-2023-0232	—	—	ShopLentor < 2.5.4 - PHP Object Injection	Feb 21, 2023 3y ago
CVE-2016-15027	low	3.5/10	meta4creations Post Duplicator Plugin notices.php mtphr_post_duplicator_notice cross site scripting	Feb 20, 2023 3y ago
CVE-2022-46836	critical	9.1/10	PHP code injection in watolib	Feb 20, 2023 3y ago
CVE-2015-10081	medium	4.3/10	arnoldle submitByMailPlugin edit_list.php cross-site request forgery	Feb 20, 2023 3y ago
CVE-2012-10007	low	3.5/10	madgicweb BuddyStream Plugin ShareBox.php cross site scripting	Feb 19, 2023 3y ago
CVE-2023-0918	medium	6.3/10	codeprojects Pharmacy Management System Avatar Image add.php unrestricted upload	Feb 19, 2023 3y ago
CVE-2023-0917	high	7.3/10	SourceCodester Simple Customer Relationship Management System login.php sql injection	Feb 19, 2023 3y ago
CVE-2023-0916	medium	6.3/10	SourceCodester Auto Dealer Management System Users.php access control	Feb 19, 2023 3y ago
CVE-2023-0910	medium	6.3/10	SourceCodester Online Pizza Ordering System GET Parameter view_prod.php sql injection	Feb 18, 2023 3y ago