Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in teamzt Smart Agreements smart-agreements allows PHP Local FCheck if you run itEPSS 0.72%Apr 17, 2025
- Critical9.9A improper control of filename for include/require statement in PHP program vulnerability in the retrieve course Information function of Wisdom Master Pro versions 5.0 through 5.2Check if you run itEPSS 0.49%Apr 17, 2025
- Medium5.4In PEAR HTTP_Request2 before 2.7.0, multiple files in the tests directory, notably tests/_network/getparameters.php and tests/_network/postparameters.php, reflect any GET or POST pCheck if you run itEPSS 0.34%Apr 17, 2025
- High7.2FOXCMS <= V1.25 is vulnerable to SQL Injection via $param['title'] in /admin/util/Field.php.Check if you run itEPSS 0.40%Apr 17, 2025
- High7.2In FOXCMS <=1.25, the installdb.php file has a time - based blind SQL injection vulnerability.Check if you run itEPSS 0.40%Apr 17, 2025
- Medium6.1Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via the name parameter in /admin/pages_account.php.Check if you run itEPSS 0.30%Apr 17, 2025
- Critical9.8A SQL Injection vulnerability exists in the parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20.Check if you run itEPSS 0.52%Apr 17, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0.Check if you run itEPSS 3.26%Apr 16, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0.Check if you run itEPSS 0.53%Apr 16, 2025
- Medium5.3A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0.Check if you run itEPSS 0.53%Apr 16, 2025
- Medium4.8A vulnerability was found in SourceCodester Online Eyewear Shop 1.0.Check if you run itEPSS 0.39%Apr 16, 2025
- Medium6.9A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical.Check if you run itEPSS 0.79%Apr 16, 2025
- High8.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Lomu WPCOM Member wpcom-member allows PHP Local File InclusCheck if you run itEPSS 0.77%Apr 16, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics Eventin wp-event-solution allows PHP Local File ICheck if you run itEPSS 0.92%Apr 16, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle Subscribe to Unlock Lite subscribe-to-unlock-litCheck if you run itEPSS 0.91%Apr 16, 2025
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Custom CSS, JS & PHP custom-css allows Remote Code Inclusion.This issue affects Custom CSS, JS & PHP: from n/a throughCheck if you run itEPSS 0.34%Apr 16, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical.Check if you run itEPSS 0.73%Apr 16, 2025
- Medium5.3A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0.Check if you run itEPSS 0.53%Apr 16, 2025
- Medium5.3A vulnerability was found in Xianqi Kindergarten Management System 2.0 Bulid 20190808.Check if you run itEPSS 0.53%Apr 16, 2025
- High7.5PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php.Check if you run itEPSS 0.88%Apr 16, 2025
- Medium4.8Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generator/classes/SystemSettings.php?f=update_settings, and the poiCheck if you run itEPSS 0.27%Apr 16, 2025
- Critical9.8Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_generator/classes/SystemSettings.php?f=update_settings.Check if you run itEPSS 0.78%Apr 16, 2025
- Medium5.1Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via id_generator/classes/Users.php?f=save.Check if you run itEPSS 0.26%Apr 16, 2025
- Medium5.4Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting (XSS) via id_generator/classes/Users.php?f=save, and the point of vulnerabilityCheck if you run itEPSS 0.28%Apr 16, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rentaCheck if you run itEPSS 0.65%Apr 15, 2025
Sort