Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,401

All time

Critical · Active

12,220

CVSS ≥ 9.0

New · 14 days

3,619

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 8551–8580 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2017-20034	low	3.5/10	PHPList List Name Persistent cross site scriting	Jun 10, 2022 4y ago
CVE-2017-20033	medium	4.3/10	PHPList Reflected cross site scriting	Jun 10, 2022 4y ago
CVE-2017-20032	medium	6.3/10	PHPList Subscription sql injection	Jun 10, 2022 4y ago
CVE-2017-20031	low	2.7/10	PHPList information disclosure	Jun 10, 2022 4y ago
CVE-2017-20030	medium	4.7/10	PHPList Sending Campain sql injection	Jun 10, 2022 4y ago
CVE-2017-20029	high	7.3/10	PHPList Edit Subscription index.php sql injection	Jun 10, 2022 4y ago
CVE-2022-2017	medium	4.7/10	SourceCodester Prison Management System Visit view_visit.php sql injection	Jun 7, 2022 4y ago
CVE-2017-20017	medium	6.3/10	The Next Generation of Genealogy Sitebuilding timeline2.php sql injection	Jun 5, 2022 4y ago
CVE-2020-36543	medium	6.3/10	SialWeb CMS about.php sql injection	Jun 4, 2022 4y ago
CVE-2020-36542	high	7.3/10	Demokratian install3.php privileges management	Jun 3, 2022 4y ago
CVE-2020-36541	high	7.3/10	Demokratian genera_select.php sql injection	Jun 3, 2022 4y ago
CVE-2020-36540	medium	6.3/10	Neetai Tech product.php sql injection	Jun 3, 2022 4y ago
CVE-2020-36536	medium	6.3/10	Brandbugle main.php sql injection	Jun 3, 2022 4y ago
CVE-2020-36535	medium	6.3/10	MINMAX newsDia.php sql injection	Jun 3, 2022 4y ago
CVE-2020-36529	high	8.8/10	SevOne Network Management System Traceroute traceroute.php command injection	Jun 3, 2022 4y ago
CVE-2022-1991	low	3.5/10	Fast Food Ordering System Master List Master.php cross site scripting	Jun 3, 2022 4y ago
CVE-2022-1839	medium	6.3/10	Home Clean Services Management System login.php sql injection	May 24, 2022 4y ago
CVE-2022-1838	medium	4.7/10	Home Clean Services Management System login.php sql injection	May 24, 2022 4y ago
CVE-2022-29221	high	8.8/10	PHP Code Injection by malicious block or filename in Smarty	May 24, 2022 4y ago
CVE-2022-1753	medium	5.4/10	WoWonder Group requests.php access control	May 17, 2022 4y ago
CVE-2022-1409	—	—	VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ PHP File Upload	May 16, 2022 4y ago
CVE-2022-1463	high	8.8/10	Booking Calendar <= 9.1 - PHP Object Injection via Shortcode	May 10, 2022 4y ago
CVE-2022-1503	low	3.5/10	GetSimple CMS Content Module edit.php cross site scripting	Apr 27, 2022 4y ago
CVE-2022-1429	high	7.2/10	SQL injection in GridHelperService.php in pimcore/pimcore	Apr 22, 2022 4y ago
CVE-2022-1339	high	8.8/10	SQL injection in ElementController.php in pimcore/pimcore	Apr 13, 2022 4y ago
CVE-2022-1219	high	7.2/10	SQL injection in RecyclebinController.php in pimcore/pimcore	Apr 8, 2022 4y ago
CVE-2022-1248	high	7.3/10	SAP Information System POST Request add_admin.php improper authentication	Apr 6, 2022 4y ago
CVE-2022-1225	medium	6.5/10	Incorrect Privilege Assignment in phpipam/phpipam	Apr 4, 2022 4y ago
CVE-2022-1223	medium	6.5/10	Incorrect Authorization in phpipam/phpipam	Apr 4, 2022 4y ago
CVE-2022-1224	medium	6.5/10	Improper Authorization in phpipam/phpipam	Apr 4, 2022 4y ago