Browse CVEs by Ecosystem and Severity

phpMyFAQ has unauthenticated SQL injection via User-Agent header in BuiltinCaptcha

phpMyFAQ enables unauthenticated 2FA brute-force attack via /admin/check acceptance of arbitrary user-id

Scramble vulnerable to remote code execution via evaluation of user-controlled input in validation rules

Grav Vulnerable to Privilege Escalation via Missing Server-Side Validation of groups/access

Grav Vulnerable to Remote Code Execution (RCE) via Malicious Plugin ZIP Upload in Direct Install Feature

Magento LTS has Weak API Session ID — Predictable MD5 of Time-Derived Inputs

phpVMS has an /importer authorization bypass causing full database wipe

PhpSpreadsheet has SSRF/RCE in IOFactory::load when $filename is user controlled

Cockpit is vulnerable to arbitrary code execution

CI4MS Theme::upload is vulnerable to Zip Slip leading to RCE

CI4MS Backup::restore is vulnerable to Zip Slip leading to RCE

Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration

goodoneuz/pay-uz: the /payment/api/editable/update endpoint overwrites existing PHP payment hook files

Froxlor has Local File Inclusion via path traversal in API `def_language` parameter leads to Remote Code Execution

Froxlor has a PHP Code Injection via Unescaped Single Quotes in userdata.inc.php Generation (MysqlServer API)

WWBN AVideo YPTSocket WebSocket Broadcast Relay Leads to Unauthenticated Cross-User JavaScript Execution via Client-Side eval() Sinks

CI4MS: Company Information Public-Facing Page Full Platform Compromise & Full Account Takeover for All Roles & Privilege-Escalation via System Settings Company Information Stored DOM XSS

CI4MS: Profile & User Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Stored Cross‑Site Scripting (Stored XSS) in Backend User Management Allows Session Hijacking and Full Administrative Account Compromise

CI4MS: Blogs Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Blogs Posts Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Blogs Posts (Categories) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Pages Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Menu Management (Posts) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS

CI4MS: System Settings (Social Media Management) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Logs Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Blogs Tags Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Permissions Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS: Methods Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

baserCMS Update Functionality Vulnerable to OS Command Injection

baserCMS has OS Command Injection Leading to Remote Code Execution (RCE)

ci4-cms-erp/ci4ms: System Settings (Mail Settings) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

AVideo Allows Unauthenticated Live Stream Control via Token Verification URL Override in control.json.php

MantisBT is vulnerable to authentication bypass through the SOAP API on MySQL

AVideo has Unauthenticated SSRF via plugin/Live/test.php

AVideo Multi-Chain Attack: Unauthenticated Remote Code Execution via Clone Key Disclosure, Database Dump, and Command Injection

AVideo has an Unauthenticated SQL Injection via `doNotShowCats` Parameter (Backslash Escape Bypass)

AVideo has Unauthenticated SSRF via `webSiteRootURL` Parameter in saveDVR.json.php, Chaining to Verification Bypass

Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion

Winter vulnerable to privilege escalation by authenticated backend users

Craft CMS Vulnerable to Authenticated RCE via "craft.app.fs.write()" in Twig Templates

WWBN AVideo is vulnerable to unauthenticated OS Command Injection via base64Url in objects/getImage.php

OpenSTAManager affected by unauthenticated privilege escalation via modules/utenti/actions.php

Froxlor has Admin-to-Root Privilege Escalation via Input Validation Bypass + OS Command Injection

Idno Vulnerable to Unauthenticated SSRF via URL Unfurl Endpoint

AVideo has Authenticated Remote Code Execution via Unsafe Plugin ZIP Extraction

AVideo has Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.php

Statamic is vulnerable to account takeover via password reset link injection