Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.4Cross Site Scripting vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the visname parameter of visitors-form.php.Apr 20, 2026
- Critical9.4SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 within the username parameter of the login page (index.php).Apr 20, 2026
- Medium6.9graphql-go is a Go implementation of GraphQL.Apr 17, 2026
- Medium4.7DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+.Apr 17, 2026
- High7.1A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input.Apr 16, 2026
- Critical9.1SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_employee.php.Apr 16, 2026
- Medium4.7SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_account.php?emp_id=.Apr 16, 2026
- Critical9.8SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_park.php.Apr 16, 2026
- High7.2SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_location.php.Apr 16, 2026
- High7.2SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_user.php.Apr 16, 2026
- High7.2SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/view_parked_details.php.Apr 16, 2026
- High7.2SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_category.php.Apr 16, 2026
- Critical9.8SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/edit_music.php.Apr 16, 2026
- Critical9.8SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_genre.php.Apr 16, 2026
- Critical9.4SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_user.php.Apr 16, 2026
- High7.3SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_playlist.php.Apr 16, 2026
- High7.3SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_music.php.Apr 16, 2026
- High8.8Composer is a dependency manager for PHP.Apr 15, 2026
- High7.8Composer is a dependency manager for PHP.Apr 15, 2026
- Critical9.8Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the session() function at config.php.Apr 15, 2026
- High8.6Slah CMS v1.5.0 and below was discovered to contain a SQL injection vulnerability via the id parameter in the vereador_ver.php endpoint.Apr 15, 2026
- High7.2Serendipity is a PHP-powered weblog engine.Apr 15, 2026
- Medium6.9Serendipity is a PHP-powered weblog engine.Apr 15, 2026
- High7.2BoidCMS is an open-source, PHP-based flat-file CMS for building simple websites and blogs, using JSON as its database.Apr 14, 2026
- High7.1Krayin CRM v2.2.x was discovered to contain a SQL injection vulnerability via the rotten_lead parameter at /Lead/LeadDataGrid.php.Apr 14, 2026