Skip to main content

PHP

26292 CVEs product

Monthly

CVE-2024-13012 Dec 29, 12:15 MEDIUM This Month

A vulnerability, which was classified as problematic, has been found in code-projects Hostel Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Hostel Management System Fabian
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-13008 Dec 29, 10:15 MEDIUM POC This Month

A vulnerability has been found in code-projects Responsive Hotel Site 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Responsive Hotel Site Fabian
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.7%
CVE-2024-13007 Dec 29, 09:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Event Management System Codezips
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.7%
CVE-2024-13006 Dec 29, 08:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in 1000 Projects Human Resource Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Human Resource Management System 1000Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2024-13005 Dec 29, 08:15 MEDIUM POC This Month

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Attendance Tracking Management System 1000Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.7%
CVE-2024-13004 Dec 29, 07:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Complaint Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2024-13003 Dec 29, 04:15 MEDIUM POC This Month

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Portfolio Management System Mca 1000Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.7%
CVE-2024-13002 Dec 29, 04:15 MEDIUM POC This Month

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Bookstore Management System 1000Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-13001 Dec 29, 03:15 MEDIUM This Month

A vulnerability was found in PHPGurukul Small CRM 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Small Crm Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-13000 Dec 29, 03:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Small CRM 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-12999 Dec 29, 02:15 MEDIUM POC This Month

A vulnerability has been found in PHPGurukul Small CRM 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-12998 Dec 28, 22:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Online Car Rental System Fabian
NVD VulDB
CVSS 4.0
6.9
EPSS
0.5%
CVE-2024-50714 Dec 27, 22:15 HIGH This Week

A Server-Side Request Forgery (SSRF) in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via a crafted script to the /FB/getFbVideoSource.php component. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SSRF
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2024-50717 Dec 27, 21:15 CRITICAL POC Act Now

SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the client parameter in the /recuperaLog.php component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE SQLi Smart Agent Smarts Srl
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2024-50716 Dec 27, 21:15 CRITICAL POC Act Now

SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the id parameter in the /sendPushManually.php component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE SQLi Smart Agent Smarts Srl
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2024-50715 Dec 27, 21:15 HIGH POC This Week

An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via command injection through a vulnerable unsanitized parameter defined in the. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Command Injection Code Injection Smart Agent +1
NVD
CVSS 3.1
7.5
EPSS
1.3%
CVE-2024-50713 Dec 27, 21:15 CRITICAL POC Act Now

SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Smart Agent Smarts Srl
NVD
CVSS 3.1
9.8
EPSS
0.5%
CVE-2024-12983 Dec 27, 07:15 MEDIUM POC This Month

A vulnerability classified as problematic has been found in code-projects Hospital Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Hospital Management System Fabian
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.5%
CVE-2024-12982 Dec 27, 06:15 MEDIUM This Month

A vulnerability was found in PHPGurukul Blood Bank & Donor Management System 2.4. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Blood Bank Donor Management System Phpgurukul
NVD VulDB
CVSS 4.0
5.1
EPSS
0.4%
CVE-2024-12981 Dec 27, 06:15 MEDIUM POC This Month

A vulnerability was found in CodeAstro Car Rental System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Car Rental System Codeastro
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-12980 Dec 27, 05:15 MEDIUM POC This Month

A vulnerability was found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Job Recruitment Anisha
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.5%
CVE-2024-12979 Dec 27, 05:15 MEDIUM POC This Month

A vulnerability was found in code-projects Job Recruitment 1.0 and classified as problematic.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Job Recruitment Anisha
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.5%
CVE-2024-12978 Dec 27, 04:15 MEDIUM POC This Month

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment Anisha
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2024-12977 Dec 27, 02:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Complaint Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-12976 Dec 27, 02:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Hospital Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12969 Dec 26, 23:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Hospital Management System Fabian
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-56361 Dec 26, 22:15 PHP MEDIUM PATCH This Month

LGSL (Live Game Server List) provides online status for games. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP XSS
NVD GitHub
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-12968 Dec 26, 22:15 MEDIUM POC This Month

A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment Code Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12967 Dec 26, 22:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment Code Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12966 Dec 26, 21:15 MEDIUM POC This Month

A vulnerability was found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment Code Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12965 Dec 26, 21:15 MEDIUM POC This Month

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Portfolio Management System Mca 1000Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12964 Dec 26, 20:15 MEDIUM POC This Month

A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Daily College Class Work Report Book 1000Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.5%
CVE-2024-12963 Dec 26, 20:15 MEDIUM POC This Month

A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment Code Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12962 Dec 26, 19:15 MEDIUM POC This Month

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment Anisha
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12961 Dec 26, 18:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Portfolio Management System Mca 1000Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12960 Dec 26, 18:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Portfolio Management System Mca 1000Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2024-12959 Dec 26, 16:15 MEDIUM POC This Month

A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Portfolio Management System Mca 1000Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2024-12958 Dec 26, 16:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Portfolio Management System Mca 1000Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2024-12956 Dec 26, 15:15 MEDIUM POC This Month

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass File Upload Portfolio Management System Mca 1000Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-12955 Dec 26, 15:15 MEDIUM POC This Month

A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as problematic. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP CSRF Blood Bank Donor Management System Phpgurukul
NVD VulDB Exploit-DB
CVSS 4.0
6.9
EPSS
0.8%
CVE-2024-12954 Dec 26, 14:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass File Upload Portfolio Management System Mca 1000Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.7%
CVE-2024-12953 Dec 26, 14:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass File Upload Portfolio Management System Mca 1000Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.7%
CVE-2024-12951 Dec 26, 13:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass File Upload Portfolio Management System Mca 1000Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.7%
CVE-2024-12950 Dec 26, 12:15 MEDIUM This Month

A vulnerability was found in code-projects/projectworlds Travel Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Travel Management System Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-12949 Dec 26, 12:15 MEDIUM This Month

A vulnerability was found in code-projects Travel Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Travel Management System Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-12948 Dec 26, 11:15 MEDIUM This Month

A vulnerability was found in code-projects Travel Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Travel Management System Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.6%
CVE-2024-12947 Dec 26, 11:15 MEDIUM POC This Month

A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Hospital Management System Codezips
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-12946 Dec 26, 10:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Attendance Tracking Management System 1000Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12945 Dec 26, 10:15 MEDIUM POC This Month

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Simple Car Rental System Code Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12944 Dec 26, 09:15 MEDIUM POC This Month

A vulnerability was found in CodeAstro House Rental Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi House Rental Management System Codeastro
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12943 Dec 26, 09:15 MEDIUM POC This Month

A vulnerability was found in CodeAstro House Rental Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi House Rental Management System Codeastro
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12942 Dec 26, 08:15 MEDIUM POC This Month

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Portfolio Management System Mca 1000Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12941 Dec 26, 08:15 MEDIUM POC This Month

A vulnerability was found in CodeAstro Blood Donor Management System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Blood Donor Management System Codeastro
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-12940 Dec 26, 07:15 MEDIUM POC This Month

A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Attendance Tracking Management System 1000Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2024-12939 Dec 26, 07:15 MEDIUM POC This Month

A vulnerability was found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment Anisha
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-12938 Dec 26, 06:15 MEDIUM POC This Month

A vulnerability has been found in code-projects Simple Admin Panel 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Simple Admin Panel Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-12937 Dec 26, 06:15 MEDIUM This Month

A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Simple Admin Panel Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-12936 Dec 26, 05:15 MEDIUM This Month

A vulnerability, which was classified as critical, has been found in code-projects Simple Admin Panel 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Simple Admin Panel Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.6%
CVE-2024-12935 Dec 26, 05:15 MEDIUM This Month

A vulnerability classified as critical was found in code-projects Simple Admin Panel 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Simple Admin Panel Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.6%
CVE-2024-12934 Dec 26, 04:15 MEDIUM This Month

A vulnerability classified as critical has been found in code-projects Simple Admin Panel 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Simple Admin Panel Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-12933 Dec 26, 04:15 MEDIUM This Month

A vulnerability was found in code-projects Simple Admin Panel 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Simple Admin Panel Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-12932 Dec 26, 03:15 MEDIUM This Month

A vulnerability was found in code-projects Simple Admin Panel 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Simple Admin Panel Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-12931 Dec 26, 03:15 MEDIUM This Month

A vulnerability was found in code-projects Simple Admin Panel 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Simple Admin Panel Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-12930 Dec 26, 02:15 MEDIUM This Month

A vulnerability was found in code-projects Simple Admin Panel 1.0 and classified as problematic.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Simple Admin Panel Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-12929 Dec 26, 00:15 MEDIUM This Month

A vulnerability has been found in code-projects Student Management System 1.0.00 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Student Management System Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-12927 Dec 25, 23:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Attendance Tracking Management System 1000Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12926 Dec 25, 20:15 MEDIUM POC This Month

A vulnerability classified as critical was found in Codezips Project Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Project Management System Codezips
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-12272 Dec 25, 04:15 HIGH This Week

The WP Travel Engine - Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including,. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress RCE Information Disclosure LFI
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2024-12901 Dec 23, 02:15 MEDIUM This Month

A vulnerability classified as critical was found in FoxCMS up to 1.2. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Information Disclosure Foxcms Qianfox
NVD VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12900 Dec 23, 02:15 MEDIUM This Month

A vulnerability classified as critical has been found in FoxCMS up to 1.2. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Information Disclosure Foxcms Qianfox
NVD VulDB
CVSS 4.0
5.3
EPSS
0.7%
CVE-2024-12899 Dec 23, 01:15 MEDIUM POC This Month

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Attendance Tracking Management System 1000Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-12898 Dec 23, 01:15 MEDIUM POC This Month

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Attendance Tracking Management System 1000Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-12895 Dec 22, 14:15 MEDIUM PATCH This Month

A vulnerability has been found in TreasureHuntGame TreasureHunt up to 963e0e0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity.

PHP SQLi Treasurehunt
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-12894 Dec 22, 12:15 MEDIUM PATCH This Month

A vulnerability, which was classified as critical, was found in TreasureHuntGame TreasureHunt up to 963e0e0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity.

PHP SQLi Treasurehunt
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-12892 Dec 22, 08:15 MEDIUM POC This Month

A vulnerability classified as problematic was found in code-projects Online Exam Mastering System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Online Exam Mastering System Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-12891 Dec 22, 07:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Exam Mastering System Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-12890 Dec 22, 06:15 MEDIUM POC This Month

A vulnerability was found in code-projects Online Exam Mastering System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Exam Mastering System Code Projects
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-12884 Dec 21, 14:15 MEDIUM POC This Month

A vulnerability was found in Codezips E-Commerce Website 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi E Commerce Site Codezips
NVD VulDB
CVSS 4.0
6.9
EPSS
0.8%
CVE-2024-12883 Dec 21, 13:15 MEDIUM POC This Month

A vulnerability was found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Job Recruitment Anisha
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.8%
CVE-2024-12721 Dec 21, 07:15 HIGH This Week

The Custom Product Tabs For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.4 via deserialization of untrusted input from the. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure Deserialization Custom Product Tabs For Woocommerce +1
NVD
CVSS 3.1
7.2
EPSS
1.1%
CVE-2024-12066 Dec 21, 07:15 HIGH This Week

The SMSA Shipping(official) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the smsa_delete_label() function in all versions up to, and. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress RCE
NVD
CVSS 3.1
8.8
EPSS
7.1%
CVE-2024-12846 Dec 21, 05:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in Emlog Pro up to 2.4.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.4%
CVE-2024-12845 Dec 20, 22:15 MEDIUM POC This Month

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-55509 Dec 20, 21:15 CRITICAL POC Act Now

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE SQLi Complaint Management System Codeastro
NVD GitHub
CVSS 3.1
9.8
EPSS
0.8%
CVE-2024-12844 Dec 20, 21:15 MEDIUM POC This Month

A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.4%
CVE-2024-12843 Dec 20, 21:15 MEDIUM POC This Month

A vulnerability was found in Emlog Pro up to 2.4.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.4%
CVE-2024-12842 Dec 20, 20:15 MEDIUM POC This Month

A vulnerability was found in Emlog Pro up to 2.4.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.4%
CVE-2024-12841 Dec 20, 19:15 MEDIUM POC This Month

A vulnerability was found in Emlog Pro up to 2.4.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.4%
CVE-2024-12571 Dec 20, 07:15 CRITICAL Act Now

The Store Locator for WordPress with Google Maps - LotsOfLocales plugin for WordPress is vulnerable to Local File Inclusion in version 3.98.9 via the 'sl_engine' parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress RCE Information Disclosure Google +1
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2024-12794 Dec 19, 18:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi E Commerce Site Codezips
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
EPSS 1% CVSS 5.3
MEDIUM This Month

A vulnerability, which was classified as problematic, has been found in code-projects Hostel Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Hostel Management System +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability has been found in code-projects Responsive Hotel Site 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Responsive Hotel Site +1
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Event Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in 1000 Projects Human Resource Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Human Resource Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Attendance Tracking Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Complaint Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Portfolio Management System Mca +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Bookstore Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability was found in PHPGurukul Small CRM 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Small Crm +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in PHPGurukul Small CRM 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability has been found in PHPGurukul Small CRM 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Small Crm +1
NVD VulDB
EPSS 0% CVSS 6.9
MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Online Car Rental System +1
NVD VulDB
EPSS 1% CVSS 7.5
HIGH This Week

A Server-Side Request Forgery (SSRF) in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via a crafted script to the /FB/getFbVideoSource.php component. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SSRF
NVD
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the client parameter in the /recuperaLog.php component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE SQLi +2
NVD
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

SQL injection vulnerability in Smart Agent v.1.1.0 allows a remote attacker to execute arbitrary code via the id parameter in the /sendPushManually.php component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE SQLi +2
NVD
EPSS 1% CVSS 7.5
HIGH POC This Week

An issue in smarts-srl.com Smart Agent v.1.1.0 allows a remote attacker to obtain sensitive information via command injection through a vulnerable unsanitized parameter defined in the. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Command Injection +3
NVD
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Smart Agent +1
NVD
EPSS 1% CVSS 5.1
MEDIUM POC This Month

A vulnerability classified as problematic has been found in code-projects Hospital Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Hospital Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.1
MEDIUM This Month

A vulnerability was found in PHPGurukul Blood Bank & Donor Management System 2.4. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Blood Bank Donor Management System +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in CodeAstro Car Rental System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Car Rental System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Job Recruitment +1
NVD GitHub VulDB
EPSS 0% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in code-projects Job Recruitment 1.0 and classified as problematic.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Job Recruitment +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment +1
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Complaint Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Hospital Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Hospital Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM PATCH This Month

LGSL (Live Game Server List) provides online status for games. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP XSS
NVD GitHub
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Portfolio Management System Mca +1
NVD GitHub VulDB
EPSS 0% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Daily College Class Work Report Book +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Portfolio Management System Mca +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Portfolio Management System Mca +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Portfolio Management System Mca +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Portfolio Management System Mca +1
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass File Upload +2
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as problematic. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP CSRF Blood Bank Donor Management System +1
NVD VulDB Exploit-DB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass File Upload +2
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass File Upload +2
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass File Upload +2
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability was found in code-projects/projectworlds Travel Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Travel Management System +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability was found in code-projects Travel Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Travel Management System +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM This Month

A vulnerability was found in code-projects Travel Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Travel Management System +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Hospital Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Attendance Tracking Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Simple Car Rental System +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in CodeAstro House Rental Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi House Rental Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in CodeAstro House Rental Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi House Rental Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Portfolio Management System Mca +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in CodeAstro Blood Donor Management System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Blood Donor Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Attendance Tracking Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Recruitment +1
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability has been found in code-projects Simple Admin Panel 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Simple Admin Panel +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM This Month

A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Simple Admin Panel +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM This Month

A vulnerability, which was classified as critical, has been found in code-projects Simple Admin Panel 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Simple Admin Panel +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM This Month

A vulnerability classified as critical was found in code-projects Simple Admin Panel 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Simple Admin Panel +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability classified as critical has been found in code-projects Simple Admin Panel 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Simple Admin Panel +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability was found in code-projects Simple Admin Panel 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Simple Admin Panel +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability was found in code-projects Simple Admin Panel 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Simple Admin Panel +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM This Month

A vulnerability was found in code-projects Simple Admin Panel 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Simple Admin Panel +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability was found in code-projects Simple Admin Panel 1.0 and classified as problematic.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Simple Admin Panel +1
NVD VulDB
EPSS 0% CVSS 5.3
MEDIUM This Month

A vulnerability has been found in code-projects Student Management System 1.0.00 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Student Management System +1
NVD VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Attendance Tracking Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as critical was found in Codezips Project Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Project Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 8.8
HIGH This Week

The WP Travel Engine - Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including,. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress RCE +2
NVD
EPSS 1% CVSS 6.9
MEDIUM This Month

A vulnerability classified as critical was found in FoxCMS up to 1.2. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Information Disclosure Foxcms +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM This Month

A vulnerability classified as critical has been found in FoxCMS up to 1.2. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Information Disclosure Foxcms +1
NVD VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Attendance Tracking Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Attendance Tracking Management System +1
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

A vulnerability has been found in TreasureHuntGame TreasureHunt up to 963e0e0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity.

PHP SQLi Treasurehunt
NVD GitHub VulDB
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

A vulnerability, which was classified as critical, was found in TreasureHuntGame TreasureHunt up to 963e0e0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity.

PHP SQLi Treasurehunt
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as problematic was found in code-projects Online Exam Mastering System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Online Exam Mastering System +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Exam Mastering System +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability was found in code-projects Online Exam Mastering System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Exam Mastering System +1
NVD VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in Codezips E-Commerce Website 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi E Commerce Site +1
NVD VulDB
EPSS 1% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in code-projects Job Recruitment 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Job Recruitment +1
NVD GitHub VulDB
EPSS 1% CVSS 7.2
HIGH This Week

The Custom Product Tabs For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.4 via deserialization of untrusted input from the. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure +3
NVD
EPSS 7% CVSS 8.8
HIGH This Week

The SMSA Shipping(official) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the smsa_delete_label() function in all versions up to, and. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress RCE
NVD
EPSS 0% CVSS 6.9
MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in Emlog Pro up to 2.4.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
EPSS 0% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE SQLi +2
NVD GitHub
EPSS 0% CVSS 6.9
MEDIUM POC This Month

A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
EPSS 0% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in Emlog Pro up to 2.4.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
EPSS 0% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in Emlog Pro up to 2.4.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
EPSS 0% CVSS 6.9
MEDIUM POC This Month

A vulnerability was found in Emlog Pro up to 2.4.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Emlog
NVD GitHub VulDB
EPSS 1% CVSS 9.8
CRITICAL Act Now

The Store Locator for WordPress with Google Maps - LotsOfLocales plugin for WordPress is vulnerable to Local File Inclusion in version 3.98.9 via the 'sl_engine' parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress RCE +3
NVD
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi E Commerce Site +1
NVD GitHub VulDB
Prev Page 136 of 293 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy