2
CVEs
0
Critical
0
High
0
KEV
2
PoC
0
Unpatched C/H
0.0%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
0
MEDIUM
0
LOW
2
Monthly CVE Trend
Affected Products (30)
PHP
547
Complete Web Based School Management System
104
Sales And Inventory System
39
Online Job Finder System
23
Online Learning Management System
21
Beauty Salon Management System
21
Online Hospital Management System
21
Advanced Online Voting System
20
Supplier Management System
19
Online Examination System
16
Grocery Sales And Inventory System
15
Legal Case Management System
15
Online Recruitment Management System
12
Payroll Management System
11
Online Shopping Portal
11
Courier Management System
10
Computer Sales And Inventory System
10
Online Laundry Management System
10
Employee Management System
10
Retro Basketball Shoes Online Store
10
Online Beauty Parlor Management System
10
Online Marriage Registration System
9
Online Loan Management System
9
Church Management System
9
Complete Online Dj Booking System
9
Online Food Ordering System
8
Complete Online Beauty Parlor Management System
8
School Fees Payment Management System
8
School Management Software
7
Online Movie Theater Seat Reservation System
7
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-5561 | Campcodes Complete POS Management and Inventory System up to version 4.0.6 allows authenticated remote attackers to inject malicious input through the Environment Variable Handler in SettingsController.php, leading to information disclosure and potential system compromise. The vulnerability has publicly available exploit code and affects an undisclosed function handling environment variable manipulation, with moderate CVSS 6.3 severity driven by network-accessible attack surface and low attack complexity. | LOW | 2.1 | 0.0% | 31 |
PoC
No patch
|
| CVE-2026-5546 | Unrestricted file upload in Campcodes Complete Online Learning Management System 1.0 allows authenticated remote attackers to upload arbitrary files via the add_lesson function in /application/models/Crud_model.php, enabling potential remote code execution or malware deployment. The vulnerability requires low-privilege authentication, carries a CVSS score of 6.3 (medium), and publicly available exploit code exists. | LOW | 2.1 | 0.0% | 31 |
PoC
No patch
|