Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: php Clear

ID	Title	Severity	Tags	Detected
CVE-2017-17987	Unrestricted File Upload in muslim-matrimonial-script-project (CVE-2017-17987) vulnerability in muslim-matrimonial-script-project (CVE-2017-17987). Successful exploitation can lead to full system takeover.	High	PHP Cwe 434 Muslim Matrimonial Script Project Muslim Matrimonial Script	8 years ago
CVE-2017-17988	Cross-Site Scripting (XSS) in muslim-matrimonial-script-project (CVE-2017-17988) cross-site scripting in muslim-matrimonial-script-project (CVE-2017-17988). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Muslim Matrimonial Script Project +1	8 years ago
CVE-2017-17989	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17989) cross-site scripting in iwcnetwork (CVE-2017-17989). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17990	Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action. Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.	High	PHP Cross-Site Request Forgery Cwe 352 Iwcnetwork +1	8 years ago
CVE-2017-17991	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17991) cross-site scripting in iwcnetwork (CVE-2017-17991). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17992	Path Traversal in path-traversal (CVE-2017-17992) path traversal in path-traversal (CVE-2017-17992). Successful exploitation can lead to full system takeover.	Critical	PHP Path Traversal Cwe 22 Iwcnetwork +1	8 years ago
CVE-2017-17993	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17993) cross-site scripting in iwcnetwork (CVE-2017-17993). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17994	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17994) cross-site scripting in iwcnetwork (CVE-2017-17994). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17995	Cross-Site Scripting (XSS) in iwcnetwork (CVE-2017-17995) cross-site scripting in iwcnetwork (CVE-2017-17995). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Iwcnetwork +1	8 years ago
CVE-2017-17971	Cross-Site Scripting (XSS) in dolibarr (CVE-2017-17971) cross-site scripting in dolibarr (CVE-2017-17971). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Dolibarr +1	8 years ago
CVE-2017-17949	Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter. Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Cells +1	8 years ago
CVE-2017-17950	Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter. Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.	High	PHP SQL Injection Cwe 89 Cells +1	8 years ago
CVE-2017-17951	SQL Injection in sqli (CVE-2017-17951) SQL injection in sqli (CVE-2017-17951). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17952	Vulnerability in php-multivendor-ecommerce-project (CVE-2017-17952) vulnerability in php-multivendor-ecommerce-project (CVE-2017-17952). Data can be tampered with by attackers.	High	PHP Cwe 20 Php Multivendor Ecommerce Project Php Multivendor Ecommerce	8 years ago
CVE-2017-17953	PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter. PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17954	PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter. PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17955	PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter. PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17956	Cross-Site Scripting (XSS) in php-multivendor-ecommerce-project (CVE-2017-17956) cross-site scripting in php-multivendor-ecommerce-project (CVE-2017-17956). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17957	PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter. PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.	Critical	PHP SQL Injection Cwe 89 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17958	PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter. PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17959	SQL Injection in sqli (CVE-2017-17959) SQL injection in sqli (CVE-2017-17959). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17960	PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php. PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.	High	PHP Cross-Site Request Forgery Cwe 352 Php Multivendor Ecommerce Project +1	8 years ago
CVE-2017-17936	Vanguard Marketplace Digital Products PHP has CSRF via /search. Vanguard Marketplace Digital Products PHP has CSRF via /search.	High	PHP Cross-Site Request Forgery Cwe 352 Vanguard Project +1	8 years ago
CVE-2017-17937	Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search. Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search.	Medium	PHP Cross-Site Scripting Cwe 79 Vanguard Project +1	8 years ago
CVE-2017-17938	PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter. PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Single Theater Booking Script Project +1	8 years ago
CVE-2017-17939	PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php. PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.	High	PHP Cross-Site Request Forgery Cwe 352 Single Theater Booking Script Project +1	8 years ago
CVE-2017-17940	PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php. PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php.	Medium	PHP Cross-Site Scripting Cwe 79 Single Theater Booking Script Project +1	8 years ago
CVE-2017-17941	SQL Injection in sqli (CVE-2017-17941) SQL injection in sqli (CVE-2017-17941). Successful exploitation can lead to full system takeover.	High	PHP SQL Injection Cwe 89 Single Theater Booking Script Project +1	8 years ago
CVE-2015-7324	Cross-Site Scripting (XSS) in stackideas (CVE-2015-7324) cross-site scripting in stackideas (CVE-2015-7324). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Stackideas +1	8 years ago
CVE-2015-7666	Cross-Site Scripting (XSS) in wordpress (CVE-2015-7666) cross-site scripting in wordpress (CVE-2015-7666). Risk of unauthorized operations or information disclosure.	Medium	PHP WordPress Cross-Site Scripting Cwe 79 +2	8 years ago
CVE-2015-7667	Cross-Site Scripting (XSS) in wordpress (CVE-2015-7667) cross-site scripting in wordpress (CVE-2015-7667). Risk of unauthorized operations or information disclosure.	Medium	PHP WordPress Cross-Site Scripting Cwe 79 +2	8 years ago
CVE-2015-7668	Cross-Site Scripting (XSS) in wordpress (CVE-2015-7668) cross-site scripting in wordpress (CVE-2015-7668). Risk of unauthorized operations or information disclosure.	Medium	PHP WordPress Cross-Site Scripting Cwe 79 +1	8 years ago
CVE-2015-7669	Path Traversal in wordpress (CVE-2015-7669) path traversal in wordpress (CVE-2015-7669). Successful exploitation can lead to full system takeover.	Critical	PHP WordPress Path Traversal Cwe 22 +1	8 years ago
CVE-2017-17900	SQL Injection in sqli (CVE-2017-17900) SQL injection in sqli (CVE-2017-17900). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Dolibarr +1	8 years ago
CVE-2017-17905	PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php. PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.	High	PHP Cross-Site Request Forgery Cwe 352 Car Rental Script Project +1	8 years ago
CVE-2017-17906	PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter. PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.	Critical	PHP SQL Injection Cwe 89 Car Rental Script Project +1	8 years ago
CVE-2017-17907	Cross-Site Scripting (XSS) in car-rental-script-project (CVE-2017-17907) cross-site scripting in car-rental-script-project (CVE-2017-17907). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Car Rental Script Project +1	8 years ago
CVE-2017-17908	PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general. PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general.	High	PHP Cross-Site Request Forgery Cwe 352 Responsive Realestate Script Project +1	8 years ago
CVE-2017-17909	PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter. PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Responsive Realestate Script Project +1	8 years ago
CVE-2017-17911	Cross-Site Scripting (XSS) in archon (CVE-2017-17911) cross-site scripting in archon (CVE-2017-17911). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Archon	8 years ago
CVE-2017-17924	Path Traversal in ordermanagementscript (CVE-2017-17924) path traversal in ordermanagementscript (CVE-2017-17924). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 22 Ordermanagementscript Professional Service Script	8 years ago
CVE-2017-17925	Cross-Site Scripting (XSS) in ordermanagementscript (CVE-2017-17925) cross-site scripting in ordermanagementscript (CVE-2017-17925). Risk of unauthorized operations or information disclosure.	Medium	PHP Cross-Site Scripting Cwe 79 Ordermanagementscript +1	8 years ago
CVE-2017-17926	Information Disclosure in ordermanagementscript (CVE-2017-17926) vulnerability in ordermanagementscript (CVE-2017-17926). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 200 Ordermanagementscript Professional Service Script	8 years ago
CVE-2017-17927	Path Traversal in ordermanagementscript (CVE-2017-17927) path traversal in ordermanagementscript (CVE-2017-17927). Risk of unauthorized operations or information disclosure.	Medium	PHP Cwe 22 Ordermanagementscript Professional Service Script	8 years ago
CVE-2017-17928	SQL Injection in sqli (CVE-2017-17928) SQL injection in sqli (CVE-2017-17928). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Ordermanagementscript +1	8 years ago
CVE-2017-17929	PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter. PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter.	Medium	PHP Cross-Site Scripting Cwe 79 Ordermanagementscript +1	8 years ago
CVE-2017-17930	Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-17930) vulnerability in csrf (CVE-2017-17930). Successful exploitation can lead to full system takeover.	High	PHP Cross-Site Request Forgery Cwe 352 Ordermanagementscript +1	8 years ago
CVE-2017-17931	PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter. PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter.	Critical	PHP SQL Injection Cwe 89 Resume Clone Script Project +1	8 years ago
CVE-2017-17891	Readymade Video Sharing Script has CSRF via user-profile-edit.php. Readymade Video Sharing Script has CSRF via user-profile-edit.php.	High	PHP Cross-Site Request Forgery Cwe 352 Readymade Video Sharing Script Project +1	8 years ago
CVE-2017-17892	SQL Injection in sqli (CVE-2017-17892) SQL injection in sqli (CVE-2017-17892). Successful exploitation can lead to full system takeover.	Critical	PHP SQL Injection Cwe 89 Readymade Video Sharing Script Project +1	8 years ago

Vulnerabilities

🍪 About cookies