Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in svil4ok Meta Keywords & Description wp-meta-keywords-meta-dCheck if you run itEPSS 0.69%May 23, 2025
- Critical9.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPFable Fable Extra fable-extra allows PHP Local File IncluCheck if you run itEPSS 0.64%May 23, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SEUR OFICIAL SEUR Oficial seur allows PHP Local File InclusCheck if you run itEPSS 0.80%May 23, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phpaddicted IGIT Related Posts With Thumb Image After Posts igit-related-postsCheck if you run itEPSS 0.26%May 23, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes WP Smart Import wp-smart-import allows PHP LocCheck if you run itEPSS 0.74%May 23, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange WordPress Social Login and Register miniorange-lCheck if you run itEPSS 0.66%May 23, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange miniOrange Discord Integration miniorange-discorCheck if you run itEPSS 0.66%May 23, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in GoodLayers Tourmaster tourmaster allows PHP Local File InclCheck if you run itEPSS 0.66%May 23, 2025
- High8.7A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1.Check if you run itEPSS 0.41%May 23, 2025
- Medium5.3A vulnerability was found in zongzhige ShopXO 6.5.0.Check if you run itEPSS 0.43%May 23, 2025
- Medium5.3A vulnerability was found in Fujian Kelixun 1.0.Check if you run itEPSS 0.52%May 23, 2025
- Medium6.9A vulnerability was found in Fujian Kelixun 1.0.Check if you run itEPSS 2.12%May 23, 2025
- Medium5.4openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used.Check if you run itEPSS 0.24%May 23, 2025
- Medium6.1A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecCheck if you run itEPSS 0.29%May 23, 2025
- Critical9.8An issue in Hospital Management System In PHP V4.0 allows a remote attacker to execute arbitrary code via the hms/doctor/edit-profile.php fileCheck if you run itEPSS 0.99%May 23, 2025
- Medium5.4Multiple stored cross-site scripting (XSS) vulnerabilities in the component /admin/card-bwdates-report.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allCheck if you run itEPSS 0.26%May 23, 2025
- Medium4.8Multiple stored cross-site scripting (XSS) vulnerabilities in the component /mcgs/admin/contactus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows aCheck if you run itEPSS 0.27%May 23, 2025
- Medium6.5PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/password-recovery.php via the emailCheck if you run itEPSS 0.42%May 23, 2025
- Medium4.4PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/login.php via the username and passCheck if you run itEPSS 0.22%May 23, 2025
- Critical9.8PHPGURUKUL Restaurant Table Booking System using PHP and MySQL v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /rtbs/check-status.php.Check if you run itEPSS 0.50%May 23, 2025
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the component mcgs/download-medical-cards.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows aCheck if you run itEPSS 0.35%May 23, 2025
- Medium6.1Phpgurukul Medical Card Generation System v1.0 is vulnerable to HTML Injection in admin/contactus.php via the parameter pagedes.Check if you run itEPSS 0.28%May 23, 2025
- Medium5.4PHPGurukul Old Age Home Management System v1.0 is vulnerable to HTML Injection via the searchdata parameter.Check if you run itEPSS 0.26%May 23, 2025
- Medium6.0File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become compromised.Check if you run itEPSS 0.36%May 22, 2025
- Medium6.9A vulnerability classified as critical was found in Campcodes Cybercafe Management System 1.0.Check if you run itEPSS 0.56%May 22, 2025
Sort