Skip to content
OpenAdvisories

Ecosystem

Packagist

7,188 known vulnerabilities.

Most affected packages

moodle/moodle 437 magento/community-edition 360 typo3/cms 188 magento/project-community-edition 161 wwbn/avideo 160 drupal/core 150 pimcore/pimcore 135 typo3/cms-core 128 dolibarr/dolibarr 127 craftcms/cms 127 concrete5/concrete5 121 thorsten/phpmyfaq 112 phpmyadmin/phpmyadmin 107 microweber/microweber 106 librenms/librenms 106 symfony/symfony 102 getgrav/grav 99 silverstripe/framework 93 snipe/snipe-it 81 drupal/drupal 81 mantisbt/mantisbt 74 shopware/platform 70 shopware/core 65 froxlor/froxlor 60 mautic/core 57 baserproject/basercms 56 getkirby/cms 51 admidio/admidio 50 phpmyfaq/phpmyfaq 47 statamic/cms 44 nilsteampassnet/teampass 42 intelliants/subrion 42 showdoc/showdoc 42 contao/core-bundle 40 ci4-cms-erp/ci4ms 36 phpoffice/phpspreadsheet 35 shopware/shopware 34 zendframework/zendframework1 34 kimai/kimai 33 prestashop/prestashop 31
All Critical High Medium Low Exploited only Public exploit

150 results · Clear filters · Feed

  • Medium 4.8
    CVE-2018-11564 Public exploit

    Pagekit Stored Cross-site Scripting

    Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and it will …

    pagekit/pagekit Packagist
  • Medium 6.1
    CVE-2018-10366 Public exploit

    User Plugin for October CSS Allows XSS

    An issue was discovered in the Users (aka Front-end user management) plugin 1.4.5 for October CMS. XSS exists in the name field.

    rainlab/user-plugin Packagist
  • Medium 4.8
    CVE-2018-6905 Public exploit

    Typo3 XSS Vulnerability

    The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted site name during the installation process.

    typo3/cms Packagist
  • Medium 6.1
    CVE-2018-7198 Public exploit

    October CMS - RainLab Blog Plugin XSS

    October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page.

    rainlab/blog-plugin Packagist
  • Medium 6.5
    CVE-2018-1042 Public exploit EPSS 16%

    Moodle SSRF Vulnerability

    Moodle 3.x has Server Side Request Forgery in the filepicker.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 5.4
    CVE-2017-16807 Public exploit

    Kirby XSS Vulnerability

    A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a specially prepared SVG document that has been uploaded as a content file.

    getkirby/cms Packagist
  • Medium 6.1
    CVE-2017-15374 Public exploit

    Shopware XSS Vulnerability

    Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to p…

    shopware/shopware Packagist
  • Medium 5.4
    CVE-2017-15284 Public exploit

    OctoberCMS Cross-Site Scripting

    Cross-Site Scripting exists in OctoberCMS 1.0.425 (aka Build 425), allowing a least privileged user to upload an SVG file containing malicious code as the Avatar for the profile. When this is opened by the Admin, it causes JavaScript execution in the context …

    october/rain Packagist
  • Medium 6.1
    CVE-2017-11503 Public exploit

    Cross-site scripting in PHPMailer

    PHPMailer 5.2.23 has XSS in the "From Email Address" and "To Email Address" fields of code_generator.php.

    phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Packagist
  • Medium 5.4
    CVE-2017-9516 Public exploit

    Craft CMS XSS Vulnerability

    Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file.

    craftcms/cms Packagist
  • Medium 6.5
    CVE-2017-7620 Public exploit

    MantisBT vulnerable to CSRF and Open Redirect attacks

    MantisBT before 1.3.11, 2.x before 2.3.3, and 2.4.x before 2.4.1 omits a backslash check in string_api.php and consequently has conflicting interpretations of an initial \/ substring as introducing either a local pathname or a remote hostname, which leads to …

    mantisbt/mantisbt Packagist
  • Medium 4.5
    CVE-2017-8382 Public exploit

    admidio CSRF Vulnerability

    admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user accounts.

    admidio/admidio Packagist
  • Medium 6.1
    CVE-2017-7725 Public exploit

    Concrete CMS vulnerable to cross-site scripting (XSS)

    concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "canonical" URL on installation of concrete5 using the "Advanced Options" settings. Remote attackers can make a GET request with any domain na…

    concrete5/concrete5 Packagist
  • Medium 6.1
    CVE-2015-7562 Public exploit

    TeamPass vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) label value of an item or (2) name of a role.

    nilsteampassnet/teampass Packagist
  • Medium 5.3
    CVE-2017-6370 Public exploit

    TYPO3 Information Disclosure Vulnerability

    TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.

    typo3/cms Packagist
  • Medium 5.5
    CVE-2017-5223 Public exploit

    Local file disclosure in PHPMailer

    An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script…

    phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Packagist
  • Medium —
    CVE-2015-6830 Public exploit EPSS 10%

    phpMyAdmin ReCaptcha bypass

    libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass a multiple-reCaptcha protection mechanism against brute-force credential guessing by providing a correct resp…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Medium —
    CVE-2015-5161 Public exploit

    ZendXml and Zend Framework contain XXE and XEE Vulnerabilities

    The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when running under PHP-FPM in a threaded environment, allows remote attackers to bypass security checks and conduct XML external e…

    zendframework/zendframework1 zendframework/zendframework zendframework/zendxml Packagist
  • Medium —
    CVE-2014-1836 Public exploit

    ImpressCMS Path Traversal to Arbitrary File Delete

    Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the image_path parameter in a cancel action.

    impresscms/impresscms Packagist
  • Medium —
    CVE-2015-2067 Public exploit Scanner template EPSS 38%

    MAGMI plugin for Magento Server Directory Traversal

    Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

    dweeves/magmi Packagist
  • Medium —
    CVE-2015-2068 Public exploit Scanner template EPSS 14%

    MAGMI cross-site scripting (XSS)

    Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allow remote attackers to inject arbitrary web script or HTML via the (1) profile parameter to web/magmi.php or (2) QUERY_STRING to web/magm…

    dweeves/magmi Packagist
  • Medium —
    CVE-2014-2383 Public exploit Scanner template EPSS 39%

    DOMPDF Arbitrary File Read

    dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the input_file parameter, as demonstrated by a php://filter/read=…

    dompdf/dompdf php-dompdf Debian Packagist
  • Medium —
    CVE-2013-3630 Public exploit EPSS 42%

    Moodle Authenticated Spelling Binary Remote Code Execution

    Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.

    moodle/moodle moodle Ubuntu Packagist
  • Medium —
    CVE-2012-1188 Public exploit

    Fork CMS Multiple XSS Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) type or (2) querystring parameters to private/en/error or (3) name parameter to private/en/locale/index.

    forkcms/forkcms Packagist
  • Medium —
    CVE-2011-4280 Public exploit

    Moodle vulnerable to XSS via bundled spikephpcoverage library

    Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as used in Moodle 2.0.x before 2.0.2 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    moodle/moodle Packagist
  • Medium —
    CVE-2010-5099 Public exploit

    TYPO3 Path Traversal vulnerability

    The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly filter file types, which allows remote attackers to bypass intended access restrictions and a…

    typo3/cms Packagist
  • Medium 6.5
    CVE-2011-4107 Public exploit EPSS 13%

    phpMyAdmin vulnerable to XML external entity (XXE) injection attack

    The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, …

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Medium —
    CVE-2011-2505 Public exploit EPSS 13%

    phpMyAdmin remote variable manipulation

    libraries/auth/swekey/swekey.auth.lib.php in the Swekey authentication feature in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1 assigns values to arbitrary parameters referenced in the query string, which allows remote attackers to modify the SESSIO…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Medium —
    CVE-2009-0815 Public exploit EPSS 42%

    TYPO3 leaks a hash secret in an error message

    The jumpUrl mechanism in class.tslib_fe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret (juHash) in an error message, which allows remote attackers to read arbitrary files by includin…

    typo3/cms Packagist
  • Medium —
    CVE-2006-5031 Public exploit

    CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files

    Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, followed by a filename ending with "%00" and a .js …

    cakephp/cakephp cakephp Debian Packagist