Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in GoodLayers Tourmaster tourmaster allows PHP Local File InclCheck if you run itEPSS 0.66%May 23, 2025
- High8.7A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1.Check if you run itEPSS 0.41%May 23, 2025
- Medium5.3A vulnerability was found in zongzhige ShopXO 6.5.0.Check if you run itEPSS 0.43%May 23, 2025
- Medium5.3A vulnerability was found in Fujian Kelixun 1.0.Check if you run itEPSS 0.52%May 23, 2025
- Medium6.9A vulnerability was found in Fujian Kelixun 1.0.Check if you run itEPSS 2.12%May 23, 2025
- Medium5.4openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used.Check if you run itEPSS 0.24%May 23, 2025
- Medium6.1A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execute arbitrary JavaScript or HTML via injecCheck if you run itEPSS 0.29%May 23, 2025
- Critical9.8An issue in Hospital Management System In PHP V4.0 allows a remote attacker to execute arbitrary code via the hms/doctor/edit-profile.php fileCheck if you run itEPSS 0.99%May 23, 2025
- Medium5.4Multiple stored cross-site scripting (XSS) vulnerabilities in the component /admin/card-bwdates-report.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allCheck if you run itEPSS 0.26%May 23, 2025
- Medium4.8Multiple stored cross-site scripting (XSS) vulnerabilities in the component /mcgs/admin/contactus.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows aCheck if you run itEPSS 0.27%May 23, 2025
- Medium6.5PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/password-recovery.php via the emailCheck if you run itEPSS 0.42%May 23, 2025
- Medium4.4PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/login.php via the username and passCheck if you run itEPSS 0.22%May 23, 2025
- Critical9.8PHPGURUKUL Restaurant Table Booking System using PHP and MySQL v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /rtbs/check-status.php.Check if you run itEPSS 0.50%May 23, 2025
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the component mcgs/download-medical-cards.php of PHPGURUKUL Medical Card Generation System using PHP and MySQL v1.0 allows aCheck if you run itEPSS 0.35%May 23, 2025
- Medium6.1Phpgurukul Medical Card Generation System v1.0 is vulnerable to HTML Injection in admin/contactus.php via the parameter pagedes.Check if you run itEPSS 0.28%May 23, 2025
- Medium5.4PHPGurukul Old Age Home Management System v1.0 is vulnerable to HTML Injection via the searchdata parameter.Check if you run itEPSS 0.26%May 23, 2025
- Medium6.0File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become compromised.Check if you run itEPSS 0.36%May 22, 2025
- Medium6.9A vulnerability classified as critical was found in Campcodes Cybercafe Management System 1.0.Check if you run itEPSS 0.56%May 22, 2025
- Medium6.9A flaw has been found in PHPGurukul/Campcodes Online Shopping Portal 1.0.Check if you run itEPSS 0.56%May 22, 2025
- Medium6.9A vulnerability was detected in PHPGurukul/Campcodes Online Shopping Portal 1.0.Check if you run itEPSS 0.60%May 22, 2025
- Medium6.9A vulnerability was found in Campcodes Online Shopping Portal 1.0.Check if you run itEPSS 0.56%May 22, 2025
- High8.8eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 0.69%May 22, 2025
- High8.8eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 0.69%May 22, 2025
- High8.8eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 0.69%May 22, 2025
- Medium5.1A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0.Check if you run itEPSS 0.49%May 21, 2025
Sort