Exposure of PHP

Programming languages
1,137
exposure score
4,221,648
sites use
4
exploited
55
critical

CVEs

1,223 results
CVE-2019-11039MEDIUMOut-of-bounds read in iconv.cEPSS 3.1%CVE-2014-3622—Use-after-free vulnerability in the add_post_var function in the Posthandler component in PHP 5.6.x before 5.6.1 might allow remote attackerEPSS 3.1%CVE-2023-4117MEDIUMPHP Jabbers Rental Property Booking index.php cross site scriptingEPSS 3.1%CVE-2020-5616—[Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free editionEPSS 3.1%CVE-2023-1211HIGH SQL Injection in phpipam/phpipamEPSS 3.0%CVE-2021-21708HIGHUAF due to php_filter_float() failingEPSS 3.0%CVE-2020-7071MEDIUMFILTER_VALIDATE_URL accepts URLs with invalid userinfoEPSS 2.9%CVE-2013-4462—WordPress Portable phpMyAdmin Plugin has an authentication bypass vulnerabilityEPSS 2.8%CVE-2024-45293HIGHXML External Entity Reference (XXE) in PHPSpreadsheet's XLSX readerEPSS 2.8%CVE-2020-7066MEDIUMget_headers() silently truncates after a null byteEPSS 2.8%CVE-2020-4043HIGHPhar unserialization vulnerability in phpMusselEPSS 2.6%CVE-2023-3187MEDIUMPHPGurukul Teachers Record Management System Profile Picture changeimage.php unrestricted uploadEPSS 2.6%CVE-2023-4111MEDIUMPHP Jabbers Bus Reservation System index.php cross site scriptingEPSS 2.5%CVE-2025-2473MEDIUMPHPGurukul Company Visitor Management System Sign In index.php sql injectionEPSS 2.5%CVE-2013-10070CRITICALPHP-Charts v1.0 PHP Code ExecutionEPSS 2.4%CVE-2020-13567HIGHMultiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker canEPSS 2.3%CVE-2021-3603HIGHInclusion of Functionality from Untrusted Control Sphere in PHPMailer/PHPMailerEPSS 2.3%CVE-2024-8929MEDIUMLeak partial content of the heap through heap buffer over-read in mysqlndEPSS 2.2%CVE-2022-31631CRITICALPDO::quote() may return unquoted stringEPSS 2.2%CVE-2021-21408HIGHAccess to restricted PHP code by dynamic static class access in smartyEPSS 2.1%