PHP

Records778All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical167CVSS 9.0–10.0

CVSS high256CVSS 7.0–8.9

Exploited now

PHP records in CISA KEV

TI-2026-78793 PHP Memory Corruption Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-78794 PHP Stale Internal Request-State Vulnerability CRITICAL 99KEV 2026-10-26 TI-2016-08118 PHPMailer Command Injection Vulnerability CRITICAL 100KEV 2025-07-07 TI-2024-04260 PHP-CGI OS Command Injection Vulnerability CRITICAL 100KEV 2024-06-12 TI-2020-17477 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability CRITICAL 93KEV 2022-08-25 TI-2020-18513 PEAR Archive_Tar Improper Link Resolution Vulnerability CRITICAL 90KEV 2022-08-25

Components

Products in the NVD configurations · select one to filter the records

Php 740 records CRITICAL Pear 5 records MEDIUM Archive Tar 4 records CRITICAL Frankenphp 2 records MEDIUM Pearweb 2 records MEDIUM Php Script Index 2 records LOW Animated Smiley Generator 1 record LOW Ar Memberscript 1 record LOW

Records

1 record in Ar Memberscript · all components

TI-2006-06334 CVE-2006-6590 · GHSA-2546-6vr9-845q

PHP remote file inclusion vulnerability in usercp_menu.php in AR Memberscript allows…

LOW 37

PHP remote file inclusion vulnerability in usercp_menu.php in AR Memberscript allows remote attackers to execute arbitrary PHP code via a URL in the script_folder parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02219 Published 2006-12-15 No fix listed

Open these records in search →

Critical	167
High	256
Medium	325
Low	30
No CVSS	0