Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,356

All time

Critical · Active

12,216

CVSS ≥ 9.0

New · 14 days

3,578

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 8401–8430 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-3458	medium	6.3/10	SourceCodester Human Resource Management System Image File employeeview.php unrestricted upload	Oct 12, 2022 3y ago
CVE-2022-3453	low	3.5/10	SourceCodester Book Store Management System transcation.php cross site scripting	Oct 11, 2022 3y ago
CVE-2022-3452	low	3.5/10	SourceCodester Book Store Management System category.php cross site scripting	Oct 11, 2022 3y ago
CVE-2022-3436	medium	6.3/10	SourceCodester Web-Based Student Clearance System Photo edit-photo.php unrestricted upload	Oct 9, 2022 3y ago
CVE-2022-3434	low	3.5/10	SourceCodester Web-Based Student Clearance System add-student.php prepare cross site scripting	Oct 8, 2022 3y ago
CVE-2022-3414	medium	5.0/10	SourceCodester Web-Based Student Clearance System POST Parameter login.php sql injection	Oct 7, 2022 3y ago
CVE-2022-3332	medium	6.3/10	SourceCodester Food Ordering Management System POST Parameter router.php sql injection	Sep 28, 2022 3y ago
CVE-2022-2903	—	—	NinjaForms < 3.6.13 - Admin+ PHP Objection Injection	Sep 26, 2022 3y ago
CVE-2022-3130	high	7.3/10	codeprojects Online Driving School login.php sql injection	Sep 7, 2022 3y ago
CVE-2022-3129	medium	6.3/10	codeprojects Online Driving School registration.php unrestricted upload	Sep 7, 2022 3y ago
CVE-2022-3152	critical	9.6/10	Unverified Password Change in phpfusion/phpfusion	Sep 7, 2022 3y ago
CVE-2022-36032	medium	5.3/10	ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent	Sep 6, 2022 3y ago
CVE-2022-3122	medium	6.3/10	SourceCodester Clinics Patient Management System medicine_details.php sql injection	Sep 5, 2022 3y ago
CVE-2022-3121	medium	4.3/10	SourceCodester Online Employee Leave Management System addemployee.php cross-site request forgery	Sep 5, 2022 3y ago
CVE-2022-3120	high	7.3/10	SourceCodester Clinics Patient Management System Login index.php sql injection	Sep 5, 2022 3y ago
CVE-2022-3118	high	7.3/10	Sourcecodehero ERP System Project processlogin.php sql injection	Sep 4, 2022 3y ago
CVE-2022-3013	medium	6.3/10	SourceCodester Simple Task Managing System loginVaLidation.php sql injection	Aug 27, 2022 4y ago
CVE-2022-3012	medium	6.3/10	oretnom23 Fast Food Ordering System index.php sql injection	Aug 27, 2022 4y ago
CVE-2022-2957	medium	6.3/10	SourceCodester Simple and Nice Shopping Cart Script profile.php sql injection	Aug 25, 2022 4y ago
CVE-2022-2956	low	3.5/10	ConsoleTVs Noxen users.php cross site scripting	Aug 23, 2022 4y ago
CVE-2022-2842	high	7.3/10	SourceCodester Gym Management System login.php sql injection	Aug 22, 2022 4y ago
CVE-2022-2407	—	—	WP phpMyAdmin < 5.2.0.4 - Admin+ Stored Cross-Site Scripting	Aug 22, 2022 4y ago
CVE-2022-33900	medium	4.1/10	WordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerability	Aug 22, 2022 4y ago
CVE-2022-2909	medium	6.3/10	SourceCodester Simple and Nice Shopping Cart Script profile.php unrestricted upload	Aug 20, 2022 4y ago
CVE-2022-2876	medium	6.3/10	SourceCodester Student Management System index.php sql injection	Aug 18, 2022 4y ago
CVE-2022-2847	medium	6.3/10	SourceCodester Guest Management System front.php sql injection	Aug 16, 2022 4y ago
CVE-2022-2843	low	3.5/10	MotoPress Timetable and Event Schedule Quick Edit admin-ajax.php cross site scripting	Aug 16, 2022 4y ago
CVE-2022-2814	low	3.5/10	SourceCodester Simple and Nice Shopping Cart Script login.php cross site scripting	Aug 15, 2022 4y ago
CVE-2022-2812	high	7.3/10	SourceCodester Guest Management System index.php sql injection	Aug 14, 2022 4y ago
CVE-2022-2811	low	3.5/10	SourceCodester Guest Management System myform.php cross site scripting	Aug 14, 2022 4y ago