Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.6FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Apr 7, 2026
- Medium6.9FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Apr 7, 2026
- High8.7HAX CMS helps manage microsite universe with PHP or NodeJs backends.Apr 6, 2026
- Medium4.3An issue in Dokuwiki v.2025-05-14b "Librarian" [56.2] allows a remote attacker to cause a denial of service via the media_upload_xhr() function in the media.php fileApr 3, 2026
- High7.1YesWiki is a wiki system written in PHP.Apr 2, 2026
- Medium5.3User enumeration vulnerability in /pwreset.php in osTicket v1.18.2 allows remote attackers to enumerate valid usernames registered in the platform.Apr 2, 2026
- Critical9.8Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs.Apr 1, 2026
- Medium6.9FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Mar 31, 2026
- Medium6.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Mar 31, 2026
- Medium5.3Sulu is an open-source PHP content management system based on the Symfony framework.Mar 31, 2026
- Critical9.8The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12.Mar 31, 2026
- High7.7Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php.Mar 30, 2026
- Medium4.8A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in in the view_purchase.php file via the "limit" parameter.Mar 27, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view_product.php file via the "limit" parameter.Mar 27, 2026
- High7.5A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file.Mar 27, 2026
- High7.5A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file.Mar 27, 2026
- High7.5A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-sales.php file.Mar 27, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view_category.php file via the "limit" parameter.Mar 27, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view_sales.php file via the "limit" parameter.Mar 27, 2026
- High8.3A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via the "id" parameter.Mar 27, 2026
- Critical9.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/manage_product.php file via the "id" parameter.Mar 27, 2026
- Critical9.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/view_product.php file via the "id" parameter.Mar 27, 2026
- High8.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_category action).Mar 27, 2026
- Critical9.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_customer action).Mar 27, 2026
- High8.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_user action).Mar 27, 2026