Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerabilityOct 15, 2026
- High8.7WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint.EPSS 0.2%Oct 15, 2026
- Critical9.8WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameterEPSS 0.5%Oct 14, 2026
- Critical9.8WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.phpEPSS 0.5%Oct 14, 2026
- Medium5.3YOURLS is a self-hosted, customizable URL shortener written in PHP.EPSS 0.5%Oct 14, 2026
- Medium5.1ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/language_settings.php via the unencoded edit_language GET parameter.EPSS 0.4%Oct 14, 2026
- Medium5.1ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/flagged_item.php via the unencoded type GET parameter.EPSS 0.4%Oct 14, 2026
- Medium6.5svg-sanitizer is a PHP SVG/XML sanitizer.EPSS 0.4%Oct 14, 2026
- Medium5.1Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 Reflected XSS via system/redirect.phpEPSS 0.2%Oct 12, 2026
- Medium5.3OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust PHP memory by uploading crafted office documents.EPSS 0.3%Oct 11, 2026
- High8.2YOURLS is a self-hosted, customizable URL shortener written in PHP.EPSS 0.4%Aug 21, 2026
- Critical9.8Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /show_price_by_pdtId.php.EPSS 0.4%Jul 30, 2026
- Medium5.1HTML injection vulnerability in PHP Point of Sale v19.4.EPSS 0.2%Apr 21, 2026
- Medium6.5SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter.EPSS 0.3%Dec 26, 2025
- High8.8Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityKEVEPSS 48.9%Dec 22, 2025
- Medium6.1HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.EPSS 0.3%Dec 11, 2025
- High8.8edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.EPSS 0.6%Dec 11, 2025
- Low1.9A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.EPSS 0.3%Dec 7, 2025
- Low2.0A vulnerability has been found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.EPSS 0.2%Dec 7, 2025
- Critical9.8PHP-CGI OS Command Injection VulnerabilityKEVEPSS 100.0%Jun 9, 2024
- Critical9.8Juniper Junos OS EX Series and SRX Series PHP External Variable Modification VulnerabilityKEVEPSS 95.1%Aug 17, 2023
- Medium5.3Juniper Junos OS EX Series PHP External Variable Modification VulnerabilityKEVEPSS 90.0%Aug 17, 2023
- High7.5PEAR Archive_Tar Improper Link Resolution VulnerabilityKEVEPSS 70.6%Jan 18, 2021
- High7.8PEAR Archive_Tar Deserialization of Untrusted Data VulnerabilityKEVEPSS 84.6%Nov 19, 2020
- Critical9.8vBulletin PHP Module Remote Code Execution VulnerabilityKEVEPSS 87.5%Aug 12, 2020
28 records · page 1 of 2
PreviousNext