Exposure of PHP

Programming languages
1,137
exposure score
4,221,648
sites use
4
exploited
55
critical

CVEs

1,223 results
CVE-2023-37260HIGHleague/oauth2-server key exposed in exception message when passing as string and providing invalid pass phraseEPSS 1.0%CVE-2023-53944HIGHEasyPHP Webserver 14.1 Path Traversal via Directory Traversal SequencesEPSS 1.0%CVE-2024-3769HIGHPHPGurukul Student Record System login.php sql injectionEPSS 0.9%CVE-2022-37344HIGHWordPress Accommodation System plugin <= 1.0.1 - Missing Access Control vulnerabilityEPSS 0.9%CVE-2024-8925LOWErroneous parsing of multipart form dataEPSS 0.9%CVE-2023-0567HIGHpassword_verify() always returns true for some invalid hashesEPSS 0.9%CVE-2024-3691HIGHPHPGurukul Small CRM Registration Page sql injectionEPSS 0.9%CVE-2020-5301LOWInformation disclosure of source code in SimpleSAMLphpEPSS 0.9%CVE-2025-5579MEDIUMPHPGurukul Dairy Farm Shop Management System search-product.php sql injectionEPSS 0.9%CVE-2022-40294HIGHCSV Injection in PHP Point of Sale version 19.0, by PHP Point of Sale, LLCEPSS 0.9%CVE-2023-22727CRITICALDatabase Query::offset() and limit() vulnerable to SQL injection in cakephpEPSS 0.9%CVE-2022-3152CRITICALUnverified Password Change in phpfusion/phpfusionEPSS 0.9%CVE-2026-6722CRITICALUse-After-Free in SOAP using Apache mapEPSS 0.9%CVE-2018-25270CRITICALThinkPHP 5.0.23 Remote Code Execution via invokefunctionEPSS 0.9%CVE-2023-2453HIGHLocal file Inclusion (LFI) in Forum Infusion via Directory TraversalEPSS 0.9%CVE-2024-0286MEDIUMPHPGurukul Hospital Management System Contact Form index.php#contact_us cross site scriptingEPSS 0.9%CVE-2016-7817—Cross-site scripting vulnerability in Simple keitai chat 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via EPSS 0.9%CVE-2021-4097MEDIUMCRLF Injection in phpservermon/phpservermonEPSS 0.9%CVE-2024-11964MEDIUMPHPGurukul Complaint Management system index.php sql injectionEPSS 0.9%CVE-2024-11966MEDIUMPHPGurukul Complaint Management system index.php sql injectionEPSS 0.9%