Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.31%Mar 27, 2026
- High8.3A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via the "id" parameter.Check if you run itEPSS 0.39%Mar 27, 2026
- Critical9.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/manage_product.php file via the "id" parameter.Check if you run itEPSS 0.50%Mar 27, 2026
- Critical9.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/view_product.php file via the "id" parameter.Check if you run itEPSS 0.50%Mar 27, 2026
- High8.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_category action).Check if you run itEPSS 0.46%Mar 27, 2026
- Critical9.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_customer action).Check if you run itEPSS 0.50%Mar 27, 2026
- High8.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_user action).Check if you run itEPSS 0.46%Mar 27, 2026
- Medium5.1A reflected Cross-Site Scripting (XSS) vulnerability has been discovered in Clickedu.Check if you run itEPSS 0.44%Mar 27, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability exists in the AnnounContent of the /admin/read.php in OTCMS V7.66 and before.Check if you run itEPSS 0.61%Mar 27, 2026
- Low1.9A weakness has been identified in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.35%Mar 27, 2026
- Medium5.5A security flaw has been discovered in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.57%Mar 27, 2026
- Medium6.5Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework.Check if you run itEPSS 0.35%Mar 27, 2026
- Low1.9A security flaw has been discovered in code-projects Online Food Ordering System 1.0.Check if you run itEPSS 0.35%Mar 26, 2026
- Low2.1A vulnerability was identified in code-projects Online Food Ordering System 1.0.Check if you run itEPSS 0.45%Mar 26, 2026
- High8.8Sharp is a content management framework built for Laravel as a package.Check if you run itEPSS 0.69%Mar 26, 2026
- High7.7Daylight Studio FuelCMS v1.5.2 was discovered to contain a SQL injection vulnerability via the /controllers/Login.php component.Check if you run itEPSS 0.34%Mar 26, 2026
- Critical9.8An issue in the /parser/dwoo component of Daylight Studio FuelCMS v1.5.2 allows attackers to execute arbitrary code via crafted PHP code.Check if you run itEPSS 0.78%Mar 26, 2026
- Medium6.5Kirby CMS through 5.1.4 allows an authenticated user with 'Editor' permissions to cause a persistent Denial of Service (DoS) via a malformed image upload.Check if you run itEPSS 0.57%Mar 26, 2026
- Low2.1A security flaw has been discovered in itsourcecode Payroll Management System up to 1.0.Check if you run itEPSS 0.45%Mar 26, 2026
- Low2.1A vulnerability was identified in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.32%Mar 26, 2026
- Low2.0A vulnerability was determined in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.38%Mar 26, 2026
- Medium5.1Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller.Check if you run itEPSS 0.19%Mar 26, 2026
- Medium5.1Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller.Check if you run itEPSS 0.20%Mar 26, 2026
- High8.8OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the usern…Check if you run itEPSS 0.33%Mar 26, 2026
- High7.1Online Quiz Maker 1.0 contains SQL injection vulnerabilities in the catid and usern parameters that allow authenticated attackers to execute arbitrary SQL commands.Check if you run itEPSS 0.27%Mar 26, 2026