Skip to main content

PHP

26291 CVEs product

Monthly

CVE-2024-49649 Jan 07, 11:15 CRITICAL Act Now

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Abdul Hakeem Build App Online allows PHP Local File Inclusion.0.23. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure LFI Build App Online +2
NVD
CVSS 3.1
9.8
EPSS
4.6%
CVE-2024-12535 Jan 07, 06:15 HIGH This Month

The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including,. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 15.6% and no vendor patch available.

PHP WordPress Authentication Bypass
NVD
CVSS 3.1
8.6
EPSS
15.6%
CVE-2024-12313 Jan 07, 05:15 HIGH This Week

The Compare Products for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.1 via deserialization of untrusted input from the. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

PHP WordPress Information Disclosure Deserialization
NVD
CVSS 3.1
8.1
EPSS
2.3%
CVE-2024-12252 Jan 07, 05:15 CRITICAL Act Now

The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remote_update AJAX action in all versions up to, and including, 2.2.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 68.1% and no vendor patch available.

PHP WordPress RCE Code Injection
NVD
CVSS 3.1
9.8
EPSS
68.1%
CVE-2024-12159 Jan 07, 05:15 MEDIUM This Month

The Optimize Your Campaigns - Google Shopping - Google Ads - Google Adwords plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1 due to the. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure Google
NVD
CVSS 3.1
5.3
EPSS
0.4%
CVE-2024-11465 Jan 07, 05:15 HIGH This Week

The Custom Product Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8.5 via deserialization of untrusted input in the. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure Deserialization Custom Product Tabs For Woocommerce +2
NVD
CVSS 3.1
7.2
EPSS
1.0%
CVE-2025-21612 Jan 06, 16:15 PHP HIGH PATCH This Month

TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP XSS
NVD GitHub
CVSS 3.1
8.6
EPSS
0.2%
CVE-2025-0233 Jan 05, 23:15 MEDIUM POC This Week

A vulnerability was found in Codezips Project Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Project Management System Codezips
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.1%
CVE-2025-0232 Jan 05, 22:15 MEDIUM POC This Month

A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Blood Bank Management System Codezips
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0231 Jan 05, 22:15 MEDIUM POC This Month

A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Gym Management System Codezips
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0230 Jan 05, 21:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Responsive Hotel Site Fabian
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0229 Jan 05, 20:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in code-projects Travel Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Travel Management System Fabian
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2024-13140 Jan 05, 12:15 MEDIUM POC This Month

A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2024-13135 Jan 05, 09:15 MEDIUM POC This Month

A vulnerability has been found in Emlog Pro 2.4.3 and classified as problematic. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2024-13132 Jan 05, 05:15 MEDIUM POC This Month

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-0214 Jan 04, 17:15 LOW Monitor

A vulnerability was found in TMD Custom Header Menu 4.0.0.1 on OpenCart. Rated low severity (CVSS 2.1), this vulnerability is remotely exploitable. No vendor patch available.

PHP SQLi
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-0213 Jan 04, 17:15 MEDIUM POC This Month

A vulnerability was found in Campcodes Project Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass File Upload Project Management System Campcodes
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0212 Jan 04, 16:15 MEDIUM POC This Month

A vulnerability was found in Campcodes Student Grading System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Student Grading System Campcodes
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0211 Jan 04, 15:15 MEDIUM POC This Month

A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure School Faculty Scheduling System Campcodes
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0210 Jan 04, 14:15 MEDIUM POC This Week

A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi School Faculty Scheduling System Campcodes
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.1%
CVE-2024-10957 Jan 04, 14:15 HIGH This Month

The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions from 1.23.8 to 1.24.11 via deserialization of untrusted input in the. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure Deserialization
NVD
CVSS 3.1
8.8
EPSS
1.3%
CVE-2025-0208 Jan 04, 13:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in code-projects Online Shoe Store 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Shoe Store Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0207 Jan 04, 13:15 MEDIUM POC This Week

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Shoe Store Code Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.1%
CVE-2025-0206 Jan 04, 12:15 MEDIUM POC This Week

A vulnerability classified as critical was found in code-projects Online Shoe Store 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Online Shoe Store Code Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.1%
CVE-2025-0205 Jan 04, 09:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Shoe Store Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0204 Jan 04, 08:15 MEDIUM POC This Month

A vulnerability was found in code-projects Online Shoe Store 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Shoe Store Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.0%
CVE-2024-10932 Jan 04, 08:15 HIGH This Month

The Backup Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.6 via deserialization of untrusted input in the. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure Deserialization
NVD
CVSS 3.1
8.8
EPSS
1.7%
CVE-2025-0203 Jan 04, 07:15 MEDIUM POC This Month

A vulnerability was found in code-projects Student Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Student Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0201 Jan 04, 04:15 MEDIUM POC This Month

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0200 Jan 04, 03:15 MEDIUM POC This Month

A vulnerability has been found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.0%
CVE-2025-0199 Jan 03, 23:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0198 Jan 03, 21:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in code-projects Point of Sales and Inventory Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.0%
CVE-2025-0197 Jan 03, 20:15 MEDIUM POC This Month

A vulnerability classified as critical was found in code-projects Point of Sales and Inventory Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0196 Jan 03, 19:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in code-projects Point of Sales and Inventory Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0195 Jan 03, 18:15 MEDIUM POC This Month

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2024-56412 Jan 03, 18:15 PHP MEDIUM POC PATCH Monitor

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP XSS Phpspreadsheet Phpoffice
NVD GitHub
CVSS 4.0
4.8
EPSS
0.3%
CVE-2024-56411 Jan 03, 18:15 PHP MEDIUM POC PATCH Monitor

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP XSS Phpspreadsheet Phpoffice
NVD GitHub
CVSS 4.0
4.8
EPSS
0.9%
CVE-2024-56410 Jan 03, 18:15 PHP MEDIUM POC PATCH Monitor

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP XSS Phpspreadsheet Phpoffice
NVD GitHub
CVSS 4.0
4.8
EPSS
0.7%
CVE-2024-56409 Jan 03, 17:15 PHP HIGH POC PATCH This Week

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP XSS Phpspreadsheet Phpoffice
NVD GitHub
CVSS 4.0
8.3
EPSS
0.7%
CVE-2024-56366 Jan 03, 17:15 PHP HIGH POC PATCH This Week

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP XSS Phpspreadsheet Phpoffice
NVD GitHub
CVSS 4.0
8.3
EPSS
0.9%
CVE-2024-56365 Jan 03, 17:15 PHP HIGH POC PATCH This Week

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP XSS Phpspreadsheet Phpoffice
NVD GitHub
CVSS 4.0
8.3
EPSS
0.7%
CVE-2024-56408 Jan 03, 16:15 PHP HIGH POC PATCH This Week

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP XSS Phpspreadsheet Phpoffice
NVD GitHub
CVSS 4.0
8.3
EPSS
1.0%
CVE-2024-55507 Jan 03, 16:15 CRITICAL POC Act Now

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_e.php component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Privilege Escalation Complaint Management System Codeastro
NVD GitHub
CVSS 3.1
9.8
EPSS
0.5%
CVE-2025-0176 Jan 03, 02:15 MEDIUM POC This Month

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0175 Jan 03, 01:15 MEDIUM POC This Month

A vulnerability was found in code-projects Online Shop 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Online Shop Anisha
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0174 Jan 03, 01:15 MEDIUM POC This Month

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0173 Jan 02, 18:15 MEDIUM POC This Month

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Eyewear Shop Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0172 Jan 02, 16:15 MEDIUM POC This Month

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Chat System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0171 Jan 02, 15:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Chat System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2024-13093 Jan 02, 09:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0.php of the component Seeker Profile Handler. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2024-13092 Jan 02, 09:15 MEDIUM POC This Month

A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-0168 Jan 01, 14:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment Anisha
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.0%
CVE-2024-13085 Dec 31, 23:15 MEDIUM This Month

A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Land Record System Phpgurukul
NVD VulDB
CVSS 4.0
6.9
EPSS
0.5%
CVE-2024-13084 Dec 31, 22:15 MEDIUM This Month

A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Land Record System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-13083 Dec 31, 22:15 MEDIUM This Month

A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Land Record System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2024-13082 Dec 31, 21:15 MEDIUM This Month

A vulnerability was found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Land Record System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2024-13081 Dec 31, 21:15 MEDIUM This Month

A vulnerability was found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Land Record System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2024-13080 Dec 31, 20:15 MEDIUM This Month

A vulnerability was found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Land Record System Phpgurukul
NVD VulDB
CVSS 4.0
5.1
EPSS
0.3%
CVE-2024-13079 Dec 31, 20:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Land Record System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Land Record System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-13078 Dec 31, 19:15 MEDIUM POC This Month

A vulnerability has been found in PHPGurukul Land Record System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Land Record System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-13077 Dec 31, 19:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Land Record System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2024-13076 Dec 31, 18:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in PHPGurukul Land Record System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Land Record System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2024-13075 Dec 31, 18:15 MEDIUM POC This Month

A vulnerability classified as problematic was found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Land Record System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-13074 Dec 31, 17:15 MEDIUM This Month

A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Land Record System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2024-13072 Dec 31, 15:15 MEDIUM POC This Month

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Beauty Parlour Management System 1000Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.6%
CVE-2024-13070 Dec 31, 15:15 MEDIUM POC This Month

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Food Ordering System Codeastro
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-13069 Dec 31, 11:15 MEDIUM POC This Month

A vulnerability was found in SourceCodester Multi Role Login System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Multi Role Login System Rems
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-56230 Dec 31, 10:15 HIGH This Week

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Maidul Dynamic Product Category Grid, Slider for WooCommerce. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.

PHP WordPress Information Disclosure LFI
NVD
CVSS 3.1
7.5
EPSS
1.5%
CVE-2024-56216 Dec 31, 10:15 MEDIUM This Month

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themifyme Themify Builder themify-builder allows PHP Local File Inclusion.6.3. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure LFI Builder +2
NVD
CVSS 3.1
6.5
EPSS
0.4%
CVE-2024-13067 Dec 31, 09:15 MEDIUM POC This Month

A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical.php of the component All Users Page. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Online Food Ordering System Codeastro
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.8%
CVE-2024-13039 Dec 30, 05:15 MEDIUM POC This Month

A vulnerability was found in code-projects Simple Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Simple Chat System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.6%
CVE-2024-13038 Dec 30, 04:15 MEDIUM POC This Month

A vulnerability was found in CodeAstro Simple Loan Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Simple Loan Management System Codeastro
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2024-13037 Dec 30, 04:15 MEDIUM POC This Month

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Attendance Tracking Management System 1000Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-13036 Dec 30, 03:15 MEDIUM This Month

A vulnerability was found in code-projects Chat System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Chat System Fabian
NVD VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2024-13035 Dec 30, 03:15 MEDIUM This Month

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Chat System Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-13034 Dec 30, 02:15 MEDIUM This Month

A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Chat System Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-13033 Dec 30, 02:15 MEDIUM This Month

A vulnerability, which was classified as problematic, has been found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Chat System Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2024-13025 Dec 29, 23:15 MEDIUM POC This Month

A vulnerability was found in Codezips College Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi College Management System Codezips
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.7%
CVE-2024-13024 Dec 29, 21:15 MEDIUM POC This Month

A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Blood Bank Management System Codezips
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.6%
CVE-2024-13023 Dec 29, 21:15 MEDIUM POC This Month

A vulnerability has been found in PHPGurukul Maid Hiring Management System 1.0 and classified as problematic. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Maid Hiring Management System Phpgurukul
NVD VulDB
CVSS 4.0
5.1
EPSS
0.4%
CVE-2024-13021 Dec 29, 20:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in SourceCodester Road Accident Map Marker 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Road Accident Map Marker Rems
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-13020 Dec 29, 19:15 MEDIUM This Month

A vulnerability classified as critical was found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Chat System Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-13019 Dec 29, 19:15 MEDIUM This Month

A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Chat System Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2024-13018 Dec 29, 18:15 MEDIUM This Month

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Maid Hiring Management System Phpgurukul
NVD VulDB
CVSS 4.0
5.1
EPSS
0.3%
CVE-2024-13017 Dec 29, 17:15 MEDIUM This Month

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Maid Hiring Management System Phpgurukul
NVD VulDB
CVSS 4.0
5.1
EPSS
0.4%
CVE-2024-13016 Dec 29, 16:15 MEDIUM This Month

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Maid Hiring Management System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-13015 Dec 29, 16:15 MEDIUM This Month

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0 and classified as problematic. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Maid Hiring Management System Phpgurukul
NVD VulDB
CVSS 4.0
5.1
EPSS
0.3%
CVE-2024-13014 Dec 29, 15:15 MEDIUM This Month

A vulnerability has been found in PHPGurukul Maid Hiring Management System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Maid Hiring Management System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-13013 Dec 29, 14:15 MEDIUM This Month

A vulnerability, which was classified as problematic, was found in PHPGurukul Maid Hiring Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Maid Hiring Management System Phpgurukul
NVD VulDB
CVSS 4.0
5.1
EPSS
0.3%
CVE-2024-13012 Dec 29, 12:15 MEDIUM This Month

A vulnerability, which was classified as problematic, has been found in code-projects Hostel Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Hostel Management System Fabian
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
EPSS 5% CVSS 9.8
CRITICAL Act Now

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Abdul Hakeem Build App Online allows PHP Local File Inclusion.0.23. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure +4
NVD
EPSS 16% CVSS 8.6
HIGH This Month

The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including,. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 15.6% and no vendor patch available.

PHP WordPress Authentication Bypass
NVD
EPSS 2% CVSS 8.1
HIGH This Week

The Compare Products for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.1 via deserialization of untrusted input from the. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

PHP WordPress Information Disclosure +1
NVD
EPSS 68% CVSS 9.8
CRITICAL Act Now

The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remote_update AJAX action in all versions up to, and including, 2.2.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 68.1% and no vendor patch available.

PHP WordPress RCE +1
NVD
EPSS 0% CVSS 5.3
MEDIUM This Month

The Optimize Your Campaigns - Google Shopping - Google Ads - Google Adwords plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1 due to the. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure +1
NVD
EPSS 1% CVSS 7.2
HIGH This Week

The Custom Product Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8.5 via deserialization of untrusted input in the. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure +4
NVD
EPSS 0% CVSS 8.6
HIGH PATCH This Month

TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP XSS
NVD GitHub
EPSS 0% CVSS 6.9
MEDIUM POC This Week

A vulnerability was found in Codezips Project Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Project Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Blood Bank Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Gym Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Responsive Hotel Site +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in code-projects Travel Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Travel Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability has been found in Emlog Pro 2.4.3 and classified as problematic. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
EPSS 0% CVSS 2.1
LOW Monitor

A vulnerability was found in TMD Custom Header Menu 4.0.0.1 on OpenCart. Rated low severity (CVSS 2.1), this vulnerability is remotely exploitable. No vendor patch available.

PHP SQLi
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in Campcodes Project Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass File Upload +2
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in Campcodes Student Grading System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Student Grading System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure School Faculty Scheduling System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.9
MEDIUM POC This Week

A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi School Faculty Scheduling System +1
NVD GitHub VulDB
EPSS 1% CVSS 8.8
HIGH This Month

The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions from 1.23.8 to 1.24.11 via deserialization of untrusted input in the. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure +1
NVD
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in code-projects Online Shoe Store 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Shoe Store +1
NVD GitHub VulDB
EPSS 0% CVSS 6.9
MEDIUM POC This Week

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Shoe Store +1
NVD GitHub VulDB
EPSS 0% CVSS 6.9
MEDIUM POC This Week

A vulnerability classified as critical was found in code-projects Online Shoe Store 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Online Shoe Store +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Shoe Store +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in code-projects Online Shoe Store 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Shoe Store +1
NVD GitHub VulDB
EPSS 2% CVSS 8.8
HIGH This Month

The Backup Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.6 via deserialization of untrusted input in the. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure +1
NVD
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in code-projects Student Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Student Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability has been found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in code-projects Point of Sales and Inventory Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as critical was found in code-projects Point of Sales and Inventory Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as critical has been found in code-projects Point of Sales and Inventory Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 4.8
MEDIUM POC PATCH Monitor

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP XSS Phpspreadsheet +1
NVD GitHub
EPSS 1% CVSS 4.8
MEDIUM POC PATCH Monitor

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP XSS Phpspreadsheet +1
NVD GitHub
EPSS 1% CVSS 4.8
MEDIUM POC PATCH Monitor

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP XSS Phpspreadsheet +1
NVD GitHub
EPSS 1% CVSS 8.3
HIGH POC PATCH This Week

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP XSS Phpspreadsheet +1
NVD GitHub
EPSS 1% CVSS 8.3
HIGH POC PATCH This Week

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP XSS Phpspreadsheet +1
NVD GitHub
EPSS 1% CVSS 8.3
HIGH POC PATCH This Week

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP XSS Phpspreadsheet +1
NVD GitHub
EPSS 1% CVSS 8.3
HIGH POC PATCH This Week

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP XSS Phpspreadsheet +1
NVD GitHub
EPSS 0% CVSS 9.8
CRITICAL POC Act Now

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_e.php component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Privilege Escalation Complaint Management System +1
NVD GitHub
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in code-projects Online Shop 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Online Shop +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Point Of Sales And Inventory Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Eyewear Shop +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Chat System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Chat System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0.php of the component Seeker Profile Handler. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment +1
NVD GitHub VulDB
EPSS 0% CVSS 6.9
MEDIUM This Month

A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Land Record System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Land Record System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Land Record System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability was found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Land Record System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability was found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Land Record System +1
NVD VulDB
EPSS 0% CVSS 5.1
MEDIUM This Month

A vulnerability was found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Land Record System +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in PHPGurukul Land Record System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Land Record System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability has been found in PHPGurukul Land Record System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Land Record System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Land Record System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in PHPGurukul Land Record System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Land Record System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as problematic was found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Land Record System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Land Record System +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Beauty Parlour Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in CodeAstro Online Food Ordering System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Food Ordering System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in SourceCodester Multi Role Login System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Multi Role Login System +1
NVD GitHub VulDB
EPSS 2% CVSS 7.5
HIGH This Week

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Maidul Dynamic Product Category Grid, Slider for WooCommerce. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.

PHP WordPress Information Disclosure +1
NVD
EPSS 0% CVSS 6.5
MEDIUM This Month

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themifyme Themify Builder themify-builder allows PHP Local File Inclusion.6.3. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure +4
NVD
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical.php of the component All Users Page. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Online Food Ordering System +1
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in code-projects Simple Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Simple Chat System +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in CodeAstro Simple Loan Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Simple Loan Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Attendance Tracking Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability was found in code-projects Chat System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Chat System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Chat System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Chat System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability, which was classified as problematic, has been found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Chat System +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in Codezips College Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi College Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Blood Bank Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.1
MEDIUM POC This Month

A vulnerability has been found in PHPGurukul Maid Hiring Management System 1.0 and classified as problematic. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Maid Hiring Management System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in SourceCodester Road Accident Map Marker 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Road Accident Map Marker +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability classified as critical was found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Chat System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability classified as problematic has been found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Chat System +1
NVD VulDB
EPSS 0% CVSS 5.1
MEDIUM This Month

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Maid Hiring Management System +1
NVD VulDB
EPSS 0% CVSS 5.1
MEDIUM This Month

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Maid Hiring Management System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Maid Hiring Management System +1
NVD VulDB
EPSS 0% CVSS 5.1
MEDIUM This Month

A vulnerability was found in PHPGurukul Maid Hiring Management System 1.0 and classified as problematic. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Maid Hiring Management System +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM This Month

A vulnerability has been found in PHPGurukul Maid Hiring Management System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Maid Hiring Management System +1
NVD VulDB
EPSS 0% CVSS 5.1
MEDIUM This Month

A vulnerability, which was classified as problematic, was found in PHPGurukul Maid Hiring Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Maid Hiring Management System +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM This Month

A vulnerability, which was classified as problematic, has been found in code-projects Hostel Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Hostel Management System +1
NVD VulDB
Prev Page 135 of 293 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy