Overview 1,428 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 29 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
2
0.1%
Not applicable
1,426
99.9%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
1,428
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
1,428
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 240 / year
19972
Not applicable2
High2
not blocked2
Working exploit published2
19980
19990
20005
Not applicable5
High3
Medium2
not blocked5
Working exploit published5
20017
Not applicable7
High4
Medium3
not blocked7
Working exploit published7
200230
Not applicable30
Critical1
High14
Medium15
not blocked30
Working exploit published30
200326
Not applicable26
High15
Medium10
Low1
not blocked26
Working exploit published26
200466
Not applicable66
Critical1
High28
Medium36
Low1
not blocked66
Working exploit published66
2005116
Not applicable116
High55
Medium61
not blocked116
Working exploit published116
2006240
Not applicable240
High129
Medium100
Low11
not blocked240
Working exploit published240
2007239
Not applicable239
Critical2
High138
Medium98
Low1
not blocked239
Working exploit published239
2008190
Not applicable190
High114
Medium74
Low2
not blocked190
Working exploit published190
2009187
Not applicable187
Critical1
High114
Medium71
Low1
not blocked187
Working exploit published187
201071
Not applicable71
Critical1
High35
Medium35
not blocked71
Working exploit published71
201141
Not applicable41
High17
Medium24
not blocked41
Working exploit published41
201244
Not applicable44
High13
Medium29
Low2
not blocked44
Working exploit published44
201317
Outside Waratek scope1
Not applicable16
High9
Medium8
not blocked17
Working exploit published17
201419
Not applicable19
High7
Medium12
not blocked19
Working exploit published19
201513
Outside Waratek scope1
Not applicable12
High5
Medium8
not blocked13
Working exploit published13
20169
Not applicable9
Critical7
High1
Medium1
not blocked9
Working exploit published9
201735
Not applicable35
Critical14
High14
Medium7
not blocked35
Working exploit published35
201819
Not applicable19
Critical2
High8
Medium8
Low1
not blocked19
Working exploit published19
201911
Not applicable11
Critical3
High2
Medium6
not blocked11
Working exploit published11
202013
Not applicable13
Critical2
High5
Medium6
not blocked13
Working exploit published13
20214
Not applicable4
Medium4
not blocked4
Working exploit published4
20227
Not applicable7
Critical1
High2
Medium4
not blocked7
Working exploit published7
202311
Not applicable11
High1
Medium10
not blocked11
Working exploit published11
20244
Not applicable4
High3
Medium1
not blocked4
Working exploit published4
20251
Not applicable1
High1
not blocked1
Working exploit published1
20261
Not applicable1
Medium1
not blocked1
Working exploit published1
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-24421 | Medium | 2026-01-24 | Not applicable | Working exploit published | phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below have flawed authorization logic which exposes the /api/setup/backup endpoint to any authenticated user despite their permissions. SetupController.php uses userIsAuthenticated() but does not verify that the requester has configuration/admin permissions. Non-admin users can trigger a configuration backup and retrieve its path. The endpoint only checks authentication, not authorization, and returns a link to the generated ZIP. This issue is fixed in version 4.0.17. |
| CVE-2025-45542 | High | 2025-06-02 | Not applicable | Working exploit published | SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to improper input validation, allowing attackers to inject SQL queries. |
| CVE-2024-55889 | High | 2024-12-13 | Not applicable | Working exploit published | phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an <iframe> element without user interaction or explicit consent. Version 3.2.10 fixes the issue. |
| CVE-2024-45293 | High | 2024-10-07 | Not applicable | Working exploit published | PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The security scanner responsible for preventing XXE attacks in the XLSX reader can be bypassed by slightly modifying the XML structure, utilizing white-spaces. On servers that allow users to upload their own Excel (XLSX) sheets, Server files and sensitive information can be disclosed by providing a crafted sheet. The security scan function in src/PhpSpreadsheet/Reader/Security/XmlScanner.php contains a flawed XML encoding check to retrieve the input file's XML encoding in the toUtf8 function. The function searches for the XML encoding through a defined regex which looks for `encoding="*"` and/or `encoding='*'`, if not found, it defaults to the UTF-8 encoding which bypasses the conversion logic. This logic can be used to pass a UTF-7 encoded XXE payload, by utilizing a whitespace before or after the = in the attribute definition. Sensitive information disclosure through the XXE on sites that allow users to upload their own excel spreadsheets, and parse them using PHPSpreadsheet's Excel parser. This issue has been addressed in release versions 1.29.1, 2.1.1, and 2.3.0. All users are advised to upgrade. There are no known workarounds for this vulnerability. |
| CVE-2024-41358 | Medium | 2024-08-29 | Not applicable | Working exploit published | phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load-data.php. |
| CVE-2024-41357 | High | 2024-07-26 | Not applicable | Working exploit published | phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php. |
| CVE-2023-5863 | Medium | 2023-10-31 | Not applicable | Working exploit published | Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2. |
| CVE-2023-38875 | Medium | 2023-09-20 | Not applicable | Working exploit published | A reflected cross-site scripting (XSS) vulnerability in msaad1999's PHP-Login-System 2.0.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'validator' parameter in '/reset-password'. |
| CVE-2023-41538 | Medium | 2023-08-30 | Not applicable | Working exploit published | phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting (XSS) via the keyword parameter. |
| CVE-2023-30212 | Medium | 2023-04-26 | Not applicable | Working exploit published | OURPHP <= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php. |
| CVE-2023-30210 | Medium | 2023-04-26 | Not applicable | Working exploit published | OURPHP <= 7.2.0 is vulnerable to Cross Site Scripting (XSS) via ourphp_tz.php. |
| CVE-2023-1880 | Medium | 2023-04-05 | Not applicable | Working exploit published | Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.12. |
| CVE-2023-24657 | Medium | 2023-03-08 | Not applicable | Working exploit published | phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter at /subnet-masks/popup.php. |
| CVE-2023-1211 | High | 2023-03-07 | Not applicable | Working exploit published | SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2. |
| CVE-2023-0678 | Medium | 2023-02-04 | Not applicable | Working exploit published | Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1. |
| CVE-2023-0676 | Medium | 2023-02-04 | Not applicable | Working exploit published | Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1. |
| CVE-2022-46888 | Medium | 2023-01-19 | Not applicable | Working exploit published | Multiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to inject arbitrary web script or HTML via the secret parameter in /login.php; q parameter in /user-ban-log.php; query parameter in /log.php; text parameter in /moresmiles.php; q parameter in myhr.php; or id parameter in /viewrequests.php. |
| CVE-2022-4407 | Medium | 2022-12-11 | Not applicable | Working exploit published | Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9. |
| CVE-2022-3766 | Medium | 2022-10-31 | Not applicable | Working exploit published | Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8. |
| CVE-2022-27308 | Medium | 2022-05-09 | Not applicable | Working exploit published | A stored cross-site scripting (XSS) vulnerability in PHProjekt PhpSimplyGest v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a project title. |
| CVE-2022-23881 | Critical | 2022-03-23 | Not applicable | Working exploit published | ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution (RCE) vulnerability via danger_key() at zzz_template.php. |
| CVE-2022-25481 | High | 2022-03-21 | Not applicable | Working exploit published | ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an intended feature of the debugging mode. |
| CVE-2022-23808 | Medium | 2022-01-22 | Not applicable | Working exploit published | An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection. |
| CVE-2022-23046 | High | 2022-01-19 | Not applicable | Working exploit published | PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php |
| CVE-2021-37704 | Medium | 2021-08-12 | Not applicable | Working exploit published | PhpFastCache is a high-performance backend cache system (packagist package phpfastcache/phpfastcache). In versions before 6.1.5, 7.1.2, and 8.0.7 the `phpinfo()` can be exposed if the `/vendor` is not protected from public access. This is a rare situation today since the vendor directory is often located outside the web directory or protected via server rule (.htaccess, etc). Only the v6, v7 and v8 will be patched respectively in 8.0.7, 7.1.2, 6.1.5. Older versions such as v5, v4 are not longer supported and will **NOT** be patched. As a workaround, protect the `/vendor` directory from public access. |
| CVE-2021-25791 | Medium | 2021-07-23 | Not applicable | Working exploit published | Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in the First Name, Last Name, and Address text fields. |
| CVE-2020-18268 | Medium | 2021-06-07 | Not applicable | Working exploit published | Open Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain sensitive information via the "redirect" parameter in the component "zb_system/cmd.php." |
| CVE-2020-35687 | Medium | 2021-01-13 | Not applicable | Working exploit published | PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox messages by the attacker on behalf of the logged in victim. |
| CVE-2020-35416 | Medium | 2020-12-15 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admin login webpage (with different request parameters), allows remote attackers to inject arbitrary web script or HTML. |
| CVE-2020-28688 | High | 2020-11-17 | Not applicable | Working exploit published | The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files. |
| CVE-2020-28687 | High | 2020-11-17 | Not applicable | Working exploit published | The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files. |
| CVE-2020-26935 | Critical | 2020-10-10 | Not applicable | Working exploit published | An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL in to a query. |
| CVE-2020-12706 | Medium | 2020-05-07 | Not applicable | Working exploit published | Multiple Cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web script or HTML via the go parameter to faq/faq_admin.php or shoutbox_panel/shoutbox_admin.php |
| CVE-2020-11441 | Medium | 2020-03-31 | Not applicable | Working exploit published | phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error page. NOTE: the vendor states "I don't see anything specifically exploitable. |
| CVE-2020-10387 | Medium | 2020-03-12 | Not applicable | Working exploit published | Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash sequence (../) via the GET parameter file. |
| CVE-2020-10386 | High | 2020-03-12 | Not applicable | Working exploit published | admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the admin/js/ directory. |
| CVE-2011-3336 | High | 2020-02-12 | Not applicable | Working exploit published | regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion. |
| CVE-2020-8547 | Critical | 2020-02-03 | Not applicable | Working exploit published | phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters. |
| CVE-2020-8505 | Medium | 2020-01-31 | Not applicable | Working exploit published | School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin CSRF to delete a user. |
| CVE-2020-8504 | Medium | 2020-01-31 | Not applicable | Working exploit published | School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrative user. |
| CVE-2020-5504 | High | 2020-01-09 | Not applicable | Working exploit published | In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server. |
| CVE-2019-19908 | Medium | 2019-12-20 | Not applicable | Working exploit published | phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into the password reset URL. In the URL, the pmc_username parameter to pass_reset.php is vulnerable. |
| CVE-2011-1939 | Critical | 2019-11-26 | Not applicable | Working exploit published | SQL injection vulnerability in Zend Framework 1.10.x before 1.10.9 and 1.11.x before 1.11.6 when using non-ASCII-compatible encodings in conjunction PDO_MySql in PHP before 5.3.6. |
| CVE-2019-16693 | Critical | 2019-09-22 | Not applicable | Working exploit published | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used. |
| CVE-2019-16692 | Critical | 2019-09-22 | Not applicable | Working exploit published | phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used. |
| CVE-2019-12922 | Medium | 2019-09-13 | Not applicable | Working exploit published | A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page. |
| CVE-2019-14470 | Medium | 2019-09-04 | Not applicable | Working exploit published | cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/success.php error_description parameter. |
| CVE-2019-14430 | Medium | 2019-08-20 | Not applicable | Working exploit published | plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection. |
| CVE-2019-12616 | Medium | 2019-06-05 | Not applicable | Working exploit published | An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken <img> tag pointing at the victim's phpMyAdmin database, and the attacker can potentially deliver a payload (such as a specific INSERT or DELETE statement) to the victim. |
| CVE-2019-12099 | High | 2019-05-14 | Not applicable | Working exploit published | In PHP-Fusion 9.03.00, edit_profile.php allows remote authenticated users to execute arbitrary code because includes/dynamics/includes/form_fileinput.php and includes/classes/PHPFusion/Installer/Lib/Core.settings.inc mishandle executable files during avatar upload. |
| CVE-2019-6977 | High | 2019-01-27 | Not applicable | Working exploit published | gdImageColorMatch in gd_color_match.c in the GD Graphics Library (aka LibGD) 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigger imagecolormatch calls with crafted image data. |
| CVE-2019-6799 | Medium | 2019-01-26 | Not applicable | Working exploit published | An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allow_local_infile PHP configuration, and the inadvertent ignoring of "options(MYSQLI_OPT_LOCAL_INFILE" calls. |
| CVE-2018-19458 | High | 2018-11-22 | Not applicable | Working exploit published | In PHP Proxy 3.0.3, any user can read files from the server without authentication due to an index.php?q=file:/// LFI URI, a different vulnerability than CVE-2018-19246. |
| CVE-2018-19277 | High | 2018-11-14 | Not applicable | Working exploit published | securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file |
| CVE-2018-19246 | High | 2018-11-13 | Not applicable | Working exploit published | PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users who lack shell access to their web server) is used. This occurs because the aeb067ca0aa9a3193dce3a7264c90187 app_key value from the default config.php is in place, and this value can be easily used to calculate the authorization data needed for local file inclusion. |
| CVE-2018-17082 | Medium | 2018-09-16 | Not applicable | Working exploit published | The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the php_handler function in sapi/apache2handler/sapi_apache2.c. |
| CVE-2014-6050 | Medium | 2018-08-28 | Not applicable | Working exploit published | phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request. |
| CVE-2014-6049 | Low | 2018-08-28 | Not applicable | Working exploit published | phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted instance ID parameter. |
| CVE-2014-6048 | Medium | 2018-08-28 | Not applicable | Working exploit published | phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request. |
| CVE-2014-6047 | Medium | 2018-08-28 | Not applicable | Working exploit published | phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks. |
| CVE-2014-6046 | High | 2018-08-28 | Not applicable | Working exploit published | Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack the authentication of unspecified users for requests that (1) delete active users by leveraging improper validation of CSRF tokens or that (2) delete open questions, (3) activate users, (4) publish FAQs, (5) add or delete Glossary, (6) add or delete FAQ news, or (7) add or delete comments or add votes by leveraging lack of a CSRF token. |
| CVE-2014-6045 | High | 2018-08-28 | Not applicable | Working exploit published | SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the restore function. |
| CVE-2018-14869 | Medium | 2018-08-06 | Not applicable | Working exploit published | PHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or A/C Holder name field in a profile. |
| CVE-2018-10188 | High | 2018-04-19 | Not applicable | Working exploit published | phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js, libraries/classes/Operations.php, and sql.php. |
| CVE-2018-9238 | Medium | 2018-04-04 | Not applicable | Working exploit published | proberv.php in Yahei-PHP Proberv 0.4.7 has XSS via the funName parameter. |
| CVE-2018-7737 | Medium | 2018-03-06 | Not applicable | Working exploit published | In Z-BlogPHP 1.5.1.1740, there is Web Site physical path leakage, as demonstrated by admin_footer.php or admin_footer.php. NOTE: the software maintainer disputes that this is a vulnerability |
| CVE-2018-7736 | Medium | 2018-03-06 | Not applicable | Working exploit published | In Z-BlogPHP 1.5.1.1740, cmd.php has XSS via the ZC_BLOG_SUBNAME parameter or ZC_UPLOAD_FILETYPE parameter. NOTE: the software maintainer disputes that this is a vulnerability |
| CVE-2018-7584 | Critical | 2018-03-01 | Not applicable | Working exploit published | In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.1.14, and 7.2.x through 7.2.2, there is a stack-based buffer under-read while parsing an HTTP response in the php_stream_url_wrap_http_ex function in ext/standard/http_fopen_wrapper.c. This subsequently results in copying a large string. |
| CVE-2018-5954 | High | 2018-01-25 | Not applicable | Working exploit published | phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by sending a large number of connect commands. |
| CVE-2018-5211 | Critical | 2018-01-09 | Not applicable | Working exploit published | PHP Melody version 2.7.1 suffer from SQL Injection Time-based attack on the page ajax.php with the parameter playlist. |
| CVE-2017-1000499 | High | 2018-01-03 | Not applicable | Working exploit published | phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc. |
| CVE-2017-17874 | High | 2017-12-27 | Not applicable | Working exploit published | Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI. |
| CVE-2017-17873 | Critical | 2017-12-27 | Not applicable | Working exploit published | Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI. |
| CVE-2017-17626 | Critical | 2017-12-13 | Not applicable | Working exploit published | Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter. |
| CVE-2017-17624 | Critical | 2017-12-13 | Not applicable | Working exploit published | PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter. |
| CVE-2017-17594 | Critical | 2017-12-13 | Not applicable | Working exploit published | DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter. |
| CVE-2017-16642 | High | 2017-11-07 | Not applicable | Working exploit published | In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145. |
| CVE-2017-15990 | Critical | 2017-10-31 | Not applicable | Working exploit published | Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/edit_myaccountdetail/. |
| CVE-2017-15988 | Critical | 2017-10-31 | Not applicable | Working exploit published | Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525. |
| CVE-2017-15978 | Critical | 2017-10-31 | Not applicable | Working exploit published | AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter. |
| CVE-2017-15970 | Critical | 2017-10-29 | Not applicable | Working exploit published | PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter. |
| CVE-2017-15081 | Critical | 2017-10-24 | Not applicable | Working exploit published | In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php. |
| CVE-2017-15808 | High | 2017-10-23 | Not applicable | Working exploit published | In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php. |
| CVE-2017-15735 | High | 2017-10-22 | Not applicable | Working exploit published | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a glossary. |
| CVE-2017-15734 | High | 2017-10-22 | Not applicable | Working exploit published | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.php. |
| CVE-2017-15730 | High | 2017-10-22 | Not applicable | Working exploit published | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php. |
| CVE-2017-15727 | Medium | 2017-10-22 | Not applicable | Working exploit published | In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment. |
| CVE-2017-15579 | Critical | 2017-10-18 | Not applicable | Working exploit published | In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.php. |
| CVE-2017-15578 | High | 2017-10-18 | Not applicable | Working exploit published | In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php. |
| CVE-2015-2147 | Critical | 2017-10-06 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters. |
| CVE-2015-2145 | Medium | 2017-10-06 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. |
| CVE-2015-2143 | High | 2017-10-06 | Not applicable | Working exploit published | Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to hijack the authentication of users for requests that cause an unspecified impact via unknown parameters. |
| CVE-2015-2142 | High | 2017-10-06 | Not applicable | Working exploit published | Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to (1) hijack the authentication of users for requests that cause an unspecified impact via the id parameter to project.php, (2) hijack the authentication of users for requests that cause an unspecified impact via the group_id parameter to group.php, (3) hijack the authentication of users for requests that delete statuses via the status_id parameter to status.php, (4) hijack the authentication of users for requests that delete severities via the severity_id parameter to severity.php, (5) hijack the authentication of users for requests that cause an unspecified impact via the priority_id parameter to priority.php, (6) hijack the authentication of users for requests that delete the operating system via the os_id parameter to os.php, (7) hijack the authentication of users for requests that delete databases via the database_id parameter to database.php, or (8) hijack the authentication of users for requests that delete sites via the site_id parameter to sites.php. |
| CVE-2017-6089 | Critical | 2017-10-03 | Not applicable | Working exploit published | SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) project or id parameters to topics/deletetopics.php; the (2) id parameter to bookmarks/deletebookmarks.php; or the (3) id parameter to calendar/deletecalendar.php. |
| CVE-2017-14619 | Medium | 2017-09-20 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module. |
| CVE-2017-14618 | Medium | 2017-09-20 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action. |
| CVE-2015-5958 | High | 2017-08-31 | Not applicable | Working exploit published | phpFileManager 0.9.8 allows remote attackers to execute arbitrary commands via a crafted URL. |
| CVE-2015-4181 | High | 2017-08-25 | Not applicable | Working exploit published | Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this vulnerability exists due to an incomplete fix to CVE-2015-4180. |
| CVE-2017-12984 | Medium | 2017-08-21 | Not applicable | Working exploit published | PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/message_update.php. |
| CVE-2017-11107 | Medium | 2017-07-08 | Not applicable | Working exploit published | phpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the form, element, rdn, or container parameter. |