Skip to main content

PHP

26427 CVEs product

Monthly

CVE-2024-22922 Jan 25, 22:15 CRITICAL POC Act Now

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Privilege Escalation Visitor Management System Projectworlds
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
1.0%
CVE-2024-24399 Jan 25, 21:15 HIGH POC THREAT This Week

An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP File Upload Leptoncms Lepton Cms
NVD GitHub Exploit-DB
CVSS 3.1
7.2
EPSS
15.6%
CVE-2024-22638 Jan 25, 21:15 CRITICAL POC Act Now

liveSite v2019.1 was discovered to contain a remote code execution (RCE) vulenrabiity via the component /livesite/edit_designer_region.php or /livesite/add_email_campaign.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Livesite
NVD Exploit-DB
CVSS 3.1
9.8
EPSS
1.6%
CVE-2024-22637 Jan 25, 21:15 MEDIUM POC This Month

Form Tools v3.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /form_builder/preview.php?form_id=2. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Form Tools Formtools
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2024-22635 Jan 25, 21:15 MEDIUM POC This Month

WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /WebCalendarvqsmnseug2/edit_entry.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Webcalendar Webcalendar Project
NVD
CVSS 3.1
6.1
EPSS
0.5%
CVE-2024-0884 Jan 25, 21:15 CRITICAL POC Act Now

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Tours Travels Management System Mayurik
NVD VulDB
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-0883 Jan 25, 19:15 CRITICAL POC Act Now

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Tours Travels Management System Mayurik
NVD VulDB
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-23855 Jan 25, 14:15 MEDIUM This Month

A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP XSS Cups Easy Ajaysharma
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2024-22076 Jan 23, 11:15 CRITICAL Act Now

MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP RCE Print Server Myq Solution
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2024-0783 Jan 22, 18:15 CRITICAL POC Act Now

A vulnerability was found in Project Worlds Online Admission System 1.0 and classified as critical.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP File Upload Online Admission System Online Admission System Project
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
1.2%
CVE-2024-0782 Jan 22, 17:15 MEDIUM POC This Month

A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Online Railway Reservation System Online Railway Reservation System Project
NVD VulDB
CVSS 3.1
6.1
EPSS
0.6%
CVE-2024-0781 Jan 22, 16:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in CodeAstro Internet Banking System 1.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Open Redirect Internet Banking System Martmbithi
NVD VulDB
CVSS 3.1
6.1
EPSS
0.5%
CVE-2024-0778 Jan 22, 16:15 CRITICAL POC THREAT Act Now

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Command Injection Isc 2500 S Firmware Uniview
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
32.1%
CVE-2024-22895 Jan 22, 15:15 HIGH POC This Week

DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP File Upload Dedecms
NVD GitHub
CVSS 3.1
8.8
EPSS
0.8%
CVE-2024-0773 Jan 22, 00:15 MEDIUM POC This Month

A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Internet Banking System
NVD VulDB
CVSS 3.1
5.4
EPSS
0.6%
CVE-2024-0739 Jan 19, 22:15 CRITICAL Act Now

A vulnerability, which was classified as critical, was found in Hecheng Leadshop up to 1.4.20. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Deserialization Leadshop
NVD VulDB
CVSS 3.1
9.8
EPSS
0.8%
CVE-2024-0735 Jan 19, 21:15 CRITICAL POC Act Now

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Tours Travels Management System Mayurik
NVD VulDB
CVSS 3.1
9.8
EPSS
0.7%
CVE-2024-0734 Jan 19, 21:15 CRITICAL Act Now

A vulnerability was found in Smsot up to 2.12. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Smsot
NVD VulDB
CVSS 3.1
9.8
EPSS
0.5%
CVE-2024-0733 Jan 19, 21:15 CRITICAL Act Now

A vulnerability was found in Smsot up to 2.12. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Smsot
NVD VulDB
CVSS 3.1
9.8
EPSS
0.5%
CVE-2024-0730 Jan 19, 19:15 CRITICAL POC Act Now

A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Time Table Generator Projectworlds
NVD VulDB
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-0729 Jan 19, 19:15 CRITICAL POC Act Now

A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Foru Cms Foru Cms Project
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-0728 Jan 19, 19:15 CRITICAL POC Act Now

A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Foru Cms Foru Cms Project
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.7%
CVE-2024-0726 Jan 19, 18:15 MEDIUM POC This Month

A vulnerability was found in Project Worlds Student Project Allocation System 1.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Student Project Allocation System Projectworlds
NVD VulDB
CVSS 3.1
6.1
EPSS
0.6%
CVE-2024-0722 Jan 19, 17:15 MEDIUM POC This Month

A vulnerability was found in code-projects Social Networking Site 1.0 and classified as problematic. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Social Networking Site Code Projects
NVD VulDB
CVSS 3.1
5.4
EPSS
0.5%
CVE-2024-0716 Jan 19, 15:15 MEDIUM POC This Month

A vulnerability classified as problematic has been found in Byzoro Smart S150 Management Platform V31R02B15. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP Information Disclosure Smart S150 Firmware Byzoro
NVD GitHub VulDB
CVSS 3.1
5.3
EPSS
1.2%
CVE-2024-0714 Jan 19, 15:15 CRITICAL Act Now

A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.5.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Command Injection Phoniebox Sourcefabric
NVD VulDB
CVSS 3.1
9.8
EPSS
1.6%
CVE-2024-0712 Jan 19, 14:15 CRITICAL POC Act Now

A vulnerability was found in Byzoro Smart S150 Management Platform V31R02B15. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass Smart S150 Firmware Byzoro
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
3.9%
CVE-2023-51947 Jan 19, 14:15 CRITICAL POC Act Now

Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to read and modify different types of data without authentication. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass Actinas Sl 2U 8 Rdx Firmware Actidata
NVD GitHub VulDB
CVSS 3.1
9.1
EPSS
0.9%
CVE-2023-51946 Jan 19, 14:15 MEDIUM POC This Month

Multiple reflected cross-site scripting (XSS) vulnerabilities in nasSvr.php in actidata actiNAS-SL-2U-8 3.2.03-SP1 allow remote attackers to inject arbitrary web script or HTML. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Actinas Sl 2U 8 Rdx Firmware Actidata
NVD GitHub VulDB
CVSS 3.1
6.1
EPSS
0.6%
CVE-2024-0652 Jan 18, 01:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Company Visitor Management System Phpgurukul
NVD VulDB
CVSS 3.1
4.8
EPSS
0.6%
CVE-2024-0651 Jan 18, 01:15 HIGH POC This Week

A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Company Visitor Management System Phpgurukul
NVD VulDB
CVSS 3.1
7.2
EPSS
0.6%
CVE-2024-0650 Jan 18, 00:15 MEDIUM POC This Month

A vulnerability was found in Project Worlds Visitor Management System 1.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Visitor Management System Projectworlds
NVD VulDB
CVSS 3.1
6.1
EPSS
0.7%
CVE-2024-0649 Jan 17, 23:15 CRITICAL Act Now

A vulnerability was found in ZhiHuiYun up to 4.4.13 and classified as critical.php of the component Search. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SSRF Zhihuiyun
NVD VulDB
CVSS 3.1
9.8
EPSS
0.5%
CVE-2024-0648 Jan 17, 23:15 CRITICAL Act Now

A vulnerability has been found in Yunyou CMS up to 2.2.6 and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP File Upload Yunyou Cms
NVD VulDB
CVSS 3.1
9.8
EPSS
0.7%
CVE-2024-22715 Jan 17, 18:15 HIGH POC This Week

Stupid Simple CMS <=1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin-edit.php. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP CSRF Stupid Simple Cms Codelyfe
NVD GitHub
CVSS 3.1
8.8
EPSS
0.3%
CVE-2024-0603 Jan 16, 22:15 CRITICAL Act Now

A vulnerability classified as critical has been found in ZhiCms up to 4.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Deserialization Zhicms
NVD VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2024-22627 Jan 16, 18:15 HIGH POC This Week

Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_distributor.php?id=. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Supplier Management System Campcodes
NVD GitHub
CVSS 3.1
7.2
EPSS
0.7%
CVE-2024-22626 Jan 16, 18:15 HIGH POC This Week

Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_retailer.php?id=. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Supplier Management System Campcodes
NVD GitHub
CVSS 3.1
7.2
EPSS
0.7%
CVE-2024-22625 Jan 16, 18:15 HIGH POC This Week

Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_category.php?id=. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Supplier Management System Campcodes
NVD GitHub
CVSS 3.1
7.2
EPSS
0.7%
CVE-2024-0558 Jan 15, 17:15 HIGH POC This Week

A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Dedebiz
NVD GitHub VulDB
CVSS 3.1
7.2
EPSS
0.6%
CVE-2024-0315 Jan 15, 16:15 HIGH This Week

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

PHP Information Disclosure LFI Central Management Fireeye
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-0545 Jan 15, 06:15 MEDIUM This Month

A vulnerability classified as problematic was found in CodeCanyon RISE Ultimate Project Manager 3.5.3. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Open Redirect Rise Ultimate Project Manager Fairsketch
NVD VulDB
CVSS 4.0
6.9
EPSS
0.5%
CVE-2024-0543 Jan 15, 06:15 HIGH POC This Week

A vulnerability classified as critical has been found in CodeAstro Real Estate Management System up to 1.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Real Estate Management System Codeastro
NVD VulDB
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-0530 Jan 15, 02:15 CRITICAL Act Now

A vulnerability was found in CXBSoft Post-Office up to 1.0 and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Microsoft Post Office Cxbsoft
NVD VulDB
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-0529 Jan 15, 02:15 CRITICAL Act Now

A vulnerability has been found in CXBSoft Post-Office up to 1.0 and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Microsoft Post Office Cxbsoft
NVD VulDB
CVSS 3.1
9.8
EPSS
0.7%
CVE-2024-0528 Jan 15, 01:15 CRITICAL Act Now

A vulnerability, which was classified as critical, was found in CXBSoft Post-Office 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Microsoft Post Office Cxbsoft
NVD VulDB
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-0527 Jan 15, 01:15 CRITICAL Act Now

A vulnerability, which was classified as critical, has been found in CXBSoft Url-shorting up to 1.3.1.php of the component HTTP POST Request Handler. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Url Shorting Cxbsoft
NVD VulDB
CVSS 3.1
9.8
EPSS
0.7%
CVE-2024-0526 Jan 15, 00:15 CRITICAL Act Now

A vulnerability classified as critical was found in CXBSoft Url-shorting up to 1.3.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Url Shorting Cxbsoft
NVD VulDB
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-0525 Jan 15, 00:15 CRITICAL Act Now

A vulnerability classified as critical has been found in CXBSoft Url-shorting up to 1.3.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Url Shorting Cxbsoft
NVD VulDB
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-0524 Jan 15, 00:15 CRITICAL Act Now

A vulnerability was found in CXBSoft Url-shorting up to 1.3.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Url Shorting Cxbsoft
NVD VulDB
CVSS 3.1
9.8
EPSS
0.6%
CVE-2024-0523 Jan 14, 23:15 CRITICAL POC Act Now

A vulnerability was found in CmsEasy up to 7.7.7. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Cmseasy
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.7%
CVE-2024-0510 Jan 13, 22:15 HIGH This Month

A vulnerability, which was classified as critical, has been found in HaoKeKeJi YiQiNiu up to 3.1. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SSRF Yiqiniu
NVD VulDB
CVSS 3.1
7.3
EPSS
0.2%
CVE-2024-0504 Jan 13, 21:15 LOW POC Monitor

A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as problematic. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Simple Online Hotel Reservation System Fabian
NVD VulDB
CVSS 3.1
3.5
EPSS
0.1%
CVE-2024-0503 Jan 13, 21:15 LOW POC Monitor

A vulnerability was found in code-projects Online FIR System 1.0. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Online Fir System Sherlock
NVD VulDB
CVSS 3.1
3.5
EPSS
0.2%
CVE-2024-0502 Jan 13, 20:15 MEDIUM POC Monitor

A vulnerability was found in SourceCodester House Rental Management System 1.0 and classified as critical. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi House Rental Management System Oretnom23
NVD VulDB
CVSS 3.1
4.7
EPSS
0.1%
CVE-2024-0499 Jan 13, 19:15 LOW POC Monitor

A vulnerability, which was classified as problematic, has been found in SourceCodester House Rental Management System 1.0.php. Rated low severity (CVSS 2.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS House Rental Management System Oretnom23
NVD VulDB
CVSS 3.1
2.4
EPSS
0.1%
CVE-2024-0498 Jan 13, 18:15 MEDIUM This Month

A vulnerability was found in Project Worlds Lawyer Management System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Online Lawyer Management System Projectworlds
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0497 Jan 13, 18:15 MEDIUM This Month

A vulnerability was found in Campcodes Student Information System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Simple Student Information System Campcodes
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0496 Jan 13, 17:15 MEDIUM This Month

A vulnerability was found in Kashipara Billing Software 1.0 and classified as critical.php of the component HTTP POST Request Handler. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Billing Software Kashipara
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0495 Jan 13, 17:15 MEDIUM This Month

A vulnerability has been found in Kashipara Billing Software 1.0 and classified as critical. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Billing Software Kashipara
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0494 Jan 13, 16:15 MEDIUM This Month

A vulnerability, which was classified as critical, was found in Kashipara Billing Software 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Billing Software Kashipara
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0493 Jan 13, 16:15 MEDIUM This Month

A vulnerability, which was classified as critical, has been found in Kashipara Billing Software 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Billing Software Kashipara
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0492 Jan 13, 15:15 MEDIUM This Month

A vulnerability classified as critical was found in Kashipara Billing Software 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Billing Software Kashipara
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0489 Jan 13, 14:15 MEDIUM This Month

A vulnerability was found in code-projects Fighting Cock Information System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System Code Projects
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0488 Jan 13, 13:15 MEDIUM This Month

A vulnerability was found in code-projects Fighting Cock Information System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System Code Projects
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0487 Jan 13, 13:15 MEDIUM This Month

A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System Code Projects
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0486 Jan 13, 12:15 MEDIUM This Month

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System Code Projects
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0485 Jan 13, 11:15 MEDIUM This Month

A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System Code Projects
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0484 Jan 13, 11:15 MEDIUM This Month

A vulnerability, which was classified as critical, has been found in code-projects Fighting Cock Information System 1.0.php. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System Code Projects
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0483 Jan 13, 10:15 MEDIUM This Month

A vulnerability classified as critical was found in Taokeyun up to 1.0.5. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Taokeyun Jifeer
NVD VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0482 Jan 13, 10:15 MEDIUM This Month

A vulnerability classified as critical has been found in Taokeyun up to 1.0.5. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Taokeyun Jifeer
NVD VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0481 Jan 13, 09:15 MEDIUM This Month

A vulnerability was found in Taokeyun up to 1.0.5. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Taokeyun Jifeer
NVD VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0480 Jan 13, 08:15 HIGH This Month

A vulnerability was found in Taokeyun up to 1.0.5. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Taokeyun Jifeer
NVD VulDB
CVSS 3.1
7.3
EPSS
0.1%
CVE-2024-0479 Jan 13, 07:15 HIGH This Month

A vulnerability was found in Taokeyun up to 1.0.5. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Taokeyun Jifeer
NVD VulDB
CVSS 3.1
7.3
EPSS
0.1%
CVE-2024-0478 Jan 13, 07:15 MEDIUM This Month

A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical.php. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System Code Projects
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0477 Jan 13, 06:15 MEDIUM This Month

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System Code Projects
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0476 Jan 13, 06:15 LOW POC Monitor

A vulnerability, which was classified as problematic, was found in Blood Bank & Donor Management 1.0. Rated low severity (CVSS 2.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Blood Bank Donor Management System Phpgurukul
NVD VulDB
CVSS 3.1
2.4
EPSS
0.1%
CVE-2024-0475 Jan 13, 00:15 MEDIUM This Month

A vulnerability, which was classified as critical, has been found in code-projects Dormitory Management System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Dormitory Management System Code Projects
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0474 Jan 12, 23:15 HIGH This Month

A vulnerability classified as critical was found in code-projects Dormitory Management System 1.0. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Dormitory Management System Code Projects
NVD GitHub VulDB
CVSS 3.1
7.3
EPSS
0.0%
CVE-2024-0473 Jan 12, 22:15 MEDIUM This Month

A vulnerability classified as critical has been found in code-projects Dormitory Management System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Dormitory Management System Code Projects
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0472 Jan 12, 22:15 LOW Monitor

A vulnerability was found in code-projects Dormitory Management System 1.0. Rated low severity (CVSS 3.5), this vulnerability is low attack complexity. No vendor patch available.

PHP Information Disclosure Dormitory Management System Code Projects
NVD GitHub VulDB
CVSS 3.1
3.5
EPSS
0.1%
CVE-2024-0471 Jan 12, 21:15 MEDIUM This Month

A vulnerability was found in code-projects Human Resource Integrated System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Human Resource Integrated System Code Projects
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0470 Jan 12, 21:15 MEDIUM This Month

A vulnerability was found in code-projects Human Resource Integrated System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Human Resource Integrated System Code Projects
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0469 Jan 12, 21:15 MEDIUM This Month

A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Human Resource Integrated System Code Projects
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0468 Jan 12, 21:15 MEDIUM This Month

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP File Upload Fighting Cock Information System Code Projects
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0467 Jan 12, 20:15 LOW Monitor

A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Employee Profile Management System Carmelogarcia
NVD GitHub VulDB
CVSS 3.1
3.5
EPSS
0.1%
CVE-2024-0466 Jan 12, 19:15 MEDIUM This Month

A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0.php. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

PHP SQLi Employee Profile Management System Code Projects
NVD GitHub VulDB
CVSS 3.1
5.5
EPSS
0.1%
CVE-2024-0465 Jan 12, 19:15 LOW Monitor

A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. Rated low severity (CVSS 3.5), this vulnerability is low attack complexity. No vendor patch available.

PHP Path Traversal Employee Profile Management System Code Projects
NVD GitHub VulDB
CVSS 3.1
3.5
EPSS
0.1%
CVE-2024-0464 Jan 12, 19:15 MEDIUM This Month

A vulnerability classified as critical has been found in code-projects Online Faculty Clearance 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Online Faculty Clearance Code Projects
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2024-0463 Jan 12, 18:15 MEDIUM This Month

A vulnerability was found in code-projects Online Faculty Clearance 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Online Faculty Clearance System Fabian
NVD GitHub VulDB
CVSS 3.1
6.3
EPSS
0.1%
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Privilege Escalation Visitor Management System +1
NVD GitHub VulDB
EPSS 16% CVSS 7.2
HIGH POC THREAT This Week

An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code to the backend/languages/index.php languages area. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP File Upload Leptoncms +1
NVD GitHub Exploit-DB
EPSS 2% CVSS 9.8
CRITICAL POC Act Now

liveSite v2019.1 was discovered to contain a remote code execution (RCE) vulenrabiity via the component /livesite/edit_designer_region.php or /livesite/add_email_campaign.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Livesite
NVD Exploit-DB
EPSS 0% CVSS 6.1
MEDIUM POC This Month

Form Tools v3.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /form_builder/preview.php?form_id=2. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Form Tools +1
NVD
EPSS 0% CVSS 6.1
MEDIUM POC This Month

WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /WebCalendarvqsmnseug2/edit_entry.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Webcalendar +1
NVD
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Tours Travels Management System +1
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Tours Travels Management System +1
NVD VulDB
EPSS 0% CVSS 6.1
MEDIUM This Month

A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP XSS Cups Easy +1
NVD
EPSS 1% CVSS 9.8
CRITICAL Act Now

MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP RCE Print Server +1
NVD
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A vulnerability was found in Project Worlds Online Admission System 1.0 and classified as critical.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP File Upload Online Admission System +1
NVD GitHub VulDB
EPSS 1% CVSS 6.1
MEDIUM POC This Month

A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Online Railway Reservation System +1
NVD VulDB
EPSS 1% CVSS 6.1
MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in CodeAstro Internet Banking System 1.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Open Redirect Internet Banking System +1
NVD VulDB
EPSS 32% CVSS 9.8
CRITICAL POC THREAT Act Now

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Command Injection Isc 2500 S Firmware +1
NVD GitHub VulDB
EPSS 1% CVSS 8.8
HIGH POC This Week

DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP File Upload Dedecms
NVD GitHub
EPSS 1% CVSS 5.4
MEDIUM POC This Month

A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Internet Banking System
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL Act Now

A vulnerability, which was classified as critical, was found in Hecheng Leadshop up to 1.4.20. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Deserialization Leadshop
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Tours Travels Management System +1
NVD VulDB
EPSS 0% CVSS 9.8
CRITICAL Act Now

A vulnerability was found in Smsot up to 2.12. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Smsot
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL Act Now

A vulnerability was found in Smsot up to 2.12. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Smsot
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Time Table Generator +1
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A vulnerability, which was classified as critical, has been found in ForU CMS up to 2020-06-23. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Foru Cms +1
NVD GitHub VulDB
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Foru Cms +1
NVD GitHub VulDB
EPSS 1% CVSS 6.1
MEDIUM POC This Month

A vulnerability was found in Project Worlds Student Project Allocation System 1.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Student Project Allocation System +1
NVD VulDB
EPSS 0% CVSS 5.4
MEDIUM POC This Month

A vulnerability was found in code-projects Social Networking Site 1.0 and classified as problematic. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Social Networking Site +1
NVD VulDB
EPSS 1% CVSS 5.3
MEDIUM POC This Month

A vulnerability classified as problematic has been found in Byzoro Smart S150 Management Platform V31R02B15. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP Information Disclosure Smart S150 Firmware +1
NVD GitHub VulDB
EPSS 2% CVSS 9.8
CRITICAL Act Now

A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.5.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Command Injection Phoniebox +1
NVD VulDB
EPSS 4% CVSS 9.8
CRITICAL POC Act Now

A vulnerability was found in Byzoro Smart S150 Management Platform V31R02B15. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass Smart S150 Firmware +1
NVD GitHub VulDB
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to read and modify different types of data without authentication. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass Actinas Sl 2U 8 Rdx Firmware +1
NVD GitHub VulDB
EPSS 1% CVSS 6.1
MEDIUM POC This Month

Multiple reflected cross-site scripting (XSS) vulnerabilities in nasSvr.php in actidata actiNAS-SL-2U-8 3.2.03-SP1 allow remote attackers to inject arbitrary web script or HTML. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Actinas Sl 2U 8 Rdx Firmware +1
NVD GitHub VulDB
EPSS 1% CVSS 4.8
MEDIUM POC This Month

A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Company Visitor Management System +1
NVD VulDB
EPSS 1% CVSS 7.2
HIGH POC This Week

A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Company Visitor Management System +1
NVD VulDB
EPSS 1% CVSS 6.1
MEDIUM POC This Month

A vulnerability was found in Project Worlds Visitor Management System 1.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Visitor Management System +1
NVD VulDB
EPSS 0% CVSS 9.8
CRITICAL Act Now

A vulnerability was found in ZhiHuiYun up to 4.4.13 and classified as critical.php of the component Search. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SSRF Zhihuiyun
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL Act Now

A vulnerability has been found in Yunyou CMS up to 2.2.6 and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP File Upload Yunyou Cms
NVD VulDB
EPSS 0% CVSS 8.8
HIGH POC This Week

Stupid Simple CMS <=1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin-edit.php. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP CSRF Stupid Simple Cms +1
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL Act Now

A vulnerability classified as critical has been found in ZhiCms up to 4.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Deserialization Zhicms
NVD VulDB
EPSS 1% CVSS 7.2
HIGH POC This Week

Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_distributor.php?id=. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Supplier Management System +1
NVD GitHub
EPSS 1% CVSS 7.2
HIGH POC This Week

Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_retailer.php?id=. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Supplier Management System +1
NVD GitHub
EPSS 1% CVSS 7.2
HIGH POC This Week

Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /Supply_Management_System/admin/edit_category.php?id=. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Supplier Management System +1
NVD GitHub
EPSS 1% CVSS 7.2
HIGH POC This Week

A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Dedebiz
NVD GitHub VulDB
EPSS 0% CVSS 7.8
HIGH This Week

Remote file inclusion vulnerability in FireEye Central Management affecting version 9.1.1.956704. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

PHP Information Disclosure LFI +2
NVD
EPSS 0% CVSS 6.9
MEDIUM This Month

A vulnerability classified as problematic was found in CodeCanyon RISE Ultimate Project Manager 3.5.3. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Open Redirect Rise Ultimate Project Manager +1
NVD VulDB
EPSS 0% CVSS 7.5
HIGH POC This Week

A vulnerability classified as critical has been found in CodeAstro Real Estate Management System up to 1.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Real Estate Management System +1
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL Act Now

A vulnerability was found in CXBSoft Post-Office up to 1.0 and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Microsoft +2
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL Act Now

A vulnerability has been found in CXBSoft Post-Office up to 1.0 and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Microsoft +2
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL Act Now

A vulnerability, which was classified as critical, was found in CXBSoft Post-Office 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Microsoft +2
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL Act Now

A vulnerability, which was classified as critical, has been found in CXBSoft Url-shorting up to 1.3.1.php of the component HTTP POST Request Handler. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Url Shorting +1
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL Act Now

A vulnerability classified as critical was found in CXBSoft Url-shorting up to 1.3.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Url Shorting +1
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL Act Now

A vulnerability classified as critical has been found in CXBSoft Url-shorting up to 1.3.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Url Shorting +1
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL Act Now

A vulnerability was found in CXBSoft Url-shorting up to 1.3.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Url Shorting +1
NVD VulDB
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

A vulnerability was found in CmsEasy up to 7.7.7. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Cmseasy
NVD GitHub VulDB
EPSS 0% CVSS 7.3
HIGH This Month

A vulnerability, which was classified as critical, has been found in HaoKeKeJi YiQiNiu up to 3.1. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SSRF Yiqiniu
NVD VulDB
EPSS 0% CVSS 3.5
LOW POC Monitor

A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as problematic. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Simple Online Hotel Reservation System +1
NVD VulDB
EPSS 0% CVSS 3.5
LOW POC Monitor

A vulnerability was found in code-projects Online FIR System 1.0. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Online Fir System +1
NVD VulDB
EPSS 0% CVSS 4.7
MEDIUM POC Monitor

A vulnerability was found in SourceCodester House Rental Management System 1.0 and classified as critical. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi House Rental Management System +1
NVD VulDB
EPSS 0% CVSS 2.4
LOW POC Monitor

A vulnerability, which was classified as problematic, has been found in SourceCodester House Rental Management System 1.0.php. Rated low severity (CVSS 2.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS House Rental Management System +1
NVD VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability was found in Project Worlds Lawyer Management System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Online Lawyer Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability was found in Campcodes Student Information System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Simple Student Information System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability was found in Kashipara Billing Software 1.0 and classified as critical.php of the component HTTP POST Request Handler. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Billing Software +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability has been found in Kashipara Billing Software 1.0 and classified as critical. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Billing Software +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability, which was classified as critical, was found in Kashipara Billing Software 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Billing Software +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability, which was classified as critical, has been found in Kashipara Billing Software 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Billing Software +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability classified as critical was found in Kashipara Billing Software 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Billing Software +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability was found in code-projects Fighting Cock Information System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability was found in code-projects Fighting Cock Information System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability, which was classified as critical, has been found in code-projects Fighting Cock Information System 1.0.php. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability classified as critical was found in Taokeyun up to 1.0.5. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Taokeyun +1
NVD VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability classified as critical has been found in Taokeyun up to 1.0.5. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Taokeyun +1
NVD VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability was found in Taokeyun up to 1.0.5. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Taokeyun +1
NVD VulDB
EPSS 0% CVSS 7.3
HIGH This Month

A vulnerability was found in Taokeyun up to 1.0.5. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Taokeyun +1
NVD VulDB
EPSS 0% CVSS 7.3
HIGH This Month

A vulnerability was found in Taokeyun up to 1.0.5. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Taokeyun +1
NVD VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical.php. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Fighting Cock Information System +1
NVD GitHub VulDB
EPSS 0% CVSS 2.4
LOW POC Monitor

A vulnerability, which was classified as problematic, was found in Blood Bank & Donor Management 1.0. Rated low severity (CVSS 2.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Blood Bank Donor Management System +1
NVD VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability, which was classified as critical, has been found in code-projects Dormitory Management System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Dormitory Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 7.3
HIGH This Month

A vulnerability classified as critical was found in code-projects Dormitory Management System 1.0. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Dormitory Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability classified as critical has been found in code-projects Dormitory Management System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Dormitory Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 3.5
LOW Monitor

A vulnerability was found in code-projects Dormitory Management System 1.0. Rated low severity (CVSS 3.5), this vulnerability is low attack complexity. No vendor patch available.

PHP Information Disclosure Dormitory Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability was found in code-projects Human Resource Integrated System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Human Resource Integrated System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability was found in code-projects Human Resource Integrated System 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Human Resource Integrated System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Human Resource Integrated System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP File Upload Fighting Cock Information System +1
NVD GitHub VulDB
EPSS 0% CVSS 3.5
LOW Monitor

A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Employee Profile Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 5.5
MEDIUM This Month

A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0.php. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

PHP SQLi Employee Profile Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 3.5
LOW Monitor

A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. Rated low severity (CVSS 3.5), this vulnerability is low attack complexity. No vendor patch available.

PHP Path Traversal Employee Profile Management System +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability classified as critical has been found in code-projects Online Faculty Clearance 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Online Faculty Clearance +1
NVD GitHub VulDB
EPSS 0% CVSS 6.3
MEDIUM This Month

A vulnerability was found in code-projects Online Faculty Clearance 1.0. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Online Faculty Clearance System +1
NVD GitHub VulDB
Prev Page 174 of 294 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy