PHP

Records778All Threatist records

Exploited (KEV)8In CISA KEV

CVSS critical167CVSS 9.0–10.0

CVSS high256CVSS 7.0–8.9

Exploited now

PHP records in CISA KEV

TI-2026-78793 PHP Memory Corruption Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-78794 PHP Stale Internal Request-State Vulnerability CRITICAL 99KEV 2026-10-26 TI-2016-08118 PHPMailer Command Injection Vulnerability CRITICAL 100KEV 2025-07-07 TI-2024-04260 PHP-CGI OS Command Injection Vulnerability CRITICAL 100KEV 2024-06-12 TI-2020-17477 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability CRITICAL 93KEV 2022-08-25 TI-2020-18513 PEAR Archive_Tar Improper Link Resolution Vulnerability CRITICAL 90KEV 2022-08-25

Components

Products in the NVD configurations · select one to filter the records

Php 740 records CRITICAL Pear 5 records MEDIUM Archive Tar 4 records CRITICAL Frankenphp 2 records MEDIUM Pearweb 2 records MEDIUM Php Script Index 2 records LOW Animated Smiley Generator 1 record LOW Ar Memberscript 1 record LOW

Records

2 records in Php Script Index · all components

TI-2006-01509 CVE-2006-1559 · GHSA-jc65-rp89-6hmq

SQL injection vulnerability in PHP Script Index allows remote attackers to execute…

LOW 35

SQL injection vulnerability in PHP Script Index allows remote attackers to execute arbitrary SQL commands via the search parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01132 Published 2006-03-31 No fix listed

TI-2006-01508 CVE-2006-1558 · GHSA-phq6-gw7v-48wr

Cross-site scripting (XSS) vulnerability in search.php in PHP Script Index allows remote…

LOW 33

Cross-site scripting (XSS) vulnerability in search.php in PHP Script Index allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01484 Published 2006-03-31 No fix listed

Open these records in search →

Critical	167
High	256
Medium	325
Low	30
No CVSS	0