Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL…EPSS 0.6%Mar 12, 2026
- High8.8Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime parameter i…EPSS 0.3%Mar 12, 2026
- High8.8Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL…EPSS 0.4%Mar 12, 2026
- High8.8Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain adm…EPSS 0.6%Mar 12, 2026
- High8.8Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL…EPSS 0.4%Mar 12, 2026
- High8.8Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauthenticated attackers to manipulate database quer…EPSS 0.4%Mar 12, 2026
- High8.8Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injectin…EPSS 0.4%Mar 12, 2026
- Critical9.9Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework.Mar 11, 2026
- Critical9.3FileThingie 2.5.7 contains an arbitrary file upload vulnerability that allows attackers to upload malicious files by sending ZIP archives through the ft2.php endpoint.EPSS 0.9%Mar 11, 2026
- Medium5.4web-auth/webauthn-lib is an open source set of PHP libraries and a Symfony bundle to allow developers to integrate that authentication mechanism into their web applications.Mar 10, 2026
- Medium5.1league/commonmark is a PHP Markdown parser.Mar 7, 2026
- High7.2The Easy PHP Settings plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0.4 via the method.Mar 7, 2026
- High7.5The JS Archive List plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.1.7 via the 'included' shortcode attribute.Mar 7, 2026
- High8.8Vito is a self-hosted web application that helps manage servers and deploy PHP applications into production servers.Mar 6, 2026
- Medium6.9OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious…EPSS 0.2%Mar 6, 2026
- High8.8OOP CMS BLOG 1.0 contains SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through multi…EPSS 0.4%Mar 6, 2026
- High8.8Data Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dca_login.php that allows unauthenticated attackers to execute arbitrary SQL queries.EPSS 0.2%Mar 6, 2026
- Medium6.9ABC ERP 0.6.4 contains a cross-site request forgery vulnerability that allows attackers to modify administrator credentials by submitting forged requests to _configurar_perfil.php.EPSS 0.1%Mar 6, 2026
- High8.8Net-Billetterie 2.9 contains an SQL injection vulnerability in the login parameter of login.inc.php that allows unauthenticated attackers to execute arbitrary SQL queries.EPSS 0.2%Mar 6, 2026
- High8.9Concrete CMS below version 9.4.8 is vulnerable to Remote Code Execution by stored PHP object injection into the Express Entry List block via the columns parameter.Mar 4, 2026
- High8.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Mar 3, 2026
- High7.2Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_carrier.php.Mar 3, 2026
- Low2.7Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_parcel_type.php.Mar 3, 2026
- Low2.7Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_category.php.Mar 3, 2026
- Low2.7Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_stock.php.Mar 3, 2026