Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,356

All time

Critical · Active

12,216

CVSS ≥ 9.0

New · 14 days

3,580

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 8341–8370 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-4053	low	2.4/10	Student Attendance Management System createClass.php cross site scripting	Nov 17, 2022 3y ago
CVE-2022-4052	medium	4.7/10	Student Attendance Management System createClass.php sql injection	Nov 17, 2022 3y ago
CVE-2022-4051	medium	6.3/10	Hostel Searching Project view-property.php sql injection	Nov 17, 2022 3y ago
CVE-2022-4015	medium	4.7/10	Sports Club Management System make_payments.php sql injection	Nov 16, 2022 3y ago
CVE-2022-4013	medium	4.3/10	Hospital Management Center appointment.php cross-site request forgery	Nov 16, 2022 3y ago
CVE-2022-4012	medium	6.3/10	Hospital Management Center patient-info.php sql injection	Nov 16, 2022 3y ago
CVE-2022-4006	low	3.7/10	WBCE CMS Header class.login.php increase_attempts excessive authentication	Nov 15, 2022 3y ago
CVE-2022-3998	medium	6.3/10	MonikaBrzica scm uredi_korisnika.php sql injection	Nov 15, 2022 3y ago
CVE-2022-3997	medium	6.3/10	MonikaBrzica scm upis_u_bazu.php sql injection	Nov 15, 2022 3y ago
CVE-2022-3979	medium	5.6/10	NagVis CoreLogonMultisite.php checkAuthCookie type conversion	Nov 13, 2022 3y ago
CVE-2022-3975	low	3.5/10	NukeViet CMS Data URL Request.php filterAttr cross site scripting	Nov 13, 2022 3y ago
CVE-2022-3973	high	7.3/10	Pingkon HMS-PHP Data Pump Metadata admin.php sql injection	Nov 13, 2022 3y ago
CVE-2022-3972	high	7.3/10	Pingkon HMS-PHP adminlogin.php sql injection	Nov 13, 2022 3y ago
CVE-2022-3968	low	3.5/10	emlog article_save.php cross site scripting	Nov 13, 2022 3y ago
CVE-2022-3966	medium	4.3/10	Ultimate Member Plugin Template class-shortcodes.php load_template pathname traversal	Nov 13, 2022 3y ago
CVE-2022-3963	low	3.5/10	gnuboard5 FAQ Key ID faq.php cross site scripting	Nov 12, 2022 3y ago
CVE-2022-3955	high	7.3/10	tholum crm42 Login class.user.php sql injection	Nov 11, 2022 3y ago
CVE-2022-3944	medium	6.3/10	jerryhanjj ERP Commodity Management inventory.php uploadImages unrestricted upload	Nov 11, 2022 3y ago
CVE-2022-3943	low	3.5/10	ForU CMS cms_chip.php cross site scripting	Nov 11, 2022 3y ago
CVE-2022-3845	low	2.4/10	phpipam Import Preview import-load-data.php cross site scripting	Nov 2, 2022 3y ago
CVE-2022-3827	medium	6.3/10	centreon Contact Groups Form formContactGroup.php sql injection	Nov 2, 2022 3y ago
CVE-2022-39369	high	8.0/10	Service Hostname Discovery Exploitation in phpCAS	Nov 1, 2022 3y ago
CVE-2022-3789	medium	5.5/10	Tim Campus Confession Wall share.php sql injection	Nov 1, 2022 3y ago
CVE-2022-40294	—	—	CSV Injection in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC	Oct 31, 2022 3y ago
CVE-2022-40290	—	—	Reflected cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.	Oct 31, 2022 3y ago
CVE-2022-40295	—	—	Authenticated sensitive information disclosure in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.	Oct 31, 2022 3y ago
CVE-2022-40287	—	—	Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via user profile data fields.	Oct 31, 2022 3y ago
CVE-2022-40296	—	—	Server-side request forgery (SSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.	Oct 31, 2022 3y ago
CVE-2022-40289	—	—	Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via file upload and download functionality.	Oct 31, 2022 3y ago
CVE-2022-40292	—	—	Unauthenticated username enumeration in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.	Oct 31, 2022 3y ago