TI-2024-01261 CVE-2024-1353 · GHSA-g2cq-vgf6-mc3q
PHPEMS index.api.php index deserialization
Priority HIGH 75
A vulnerability, which was classified as critical, has been found in PHPEMS up to 1.0.
Phpems
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Phpems records in CISA KEVNo Phpems vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Phpems · all components
TI-2025-13921 CVE-2025-15244 · GHSA-fr44-mp8q-2m5q
PHPEMS Purchase Request race condition
Priority MEDIUM 61
A vulnerability has been found in PHPEMS up to 11.0.
TI-2025-14049 CVE-2025-15405 · GHSA-x8m4-6wf8-65hj
PHPEMS cross-site request forgery
Priority MEDIUM 57
A vulnerability was detected in PHPEMS up to 11.0.
TI-2025-13919 CVE-2025-15242 · GHSA-hpjv-rm6f-xw2p
PHPEMS Coupon race condition
Priority MEDIUM 45
A vulnerability was detected in PHPEMS up to 11.0.
TI-2023-06095 CVE-2023-6654 · GHSA-5rv2-vvmf-f7w8
PHPEMS Session Data session.cls.php deserialization
Priority MEDIUM 41
A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0.
TI-2023-05933 CVE-2023-6472 · GHSA-wqp3-26m2-8cfv
PHPEMS Content Section api.cls.php cross site scripting
Priority LOW 23
A vulnerability, which was classified as problematic, has been found in PHPEMS 7.0.