Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Phpems Component: Phpems Clear all filters
TI-2025-14049 CVE-2025-15405 · GHSA-x8m4-6wf8-65hj

PHPEMS cross-site request forgery

Priority MEDIUM 57

A vulnerability was detected in PHPEMS up to 11.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00252 Published 2026-01-01 No fix listed CWE-352
TI-2025-13921 CVE-2025-15244 · GHSA-fr44-mp8q-2m5q

PHPEMS Purchase Request race condition

Priority MEDIUM 61

A vulnerability has been found in PHPEMS up to 11.0.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00408 Published 2025-12-30 No fix listed CWE-362
TI-2025-13919 CVE-2025-15242 · GHSA-hpjv-rm6f-xw2p

PHPEMS Coupon race condition

Priority MEDIUM 45

A vulnerability was detected in PHPEMS up to 11.0.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00237 Published 2025-12-30 No fix listed CWE-362
TI-2024-01261 CVE-2024-1353 · GHSA-g2cq-vgf6-mc3q

PHPEMS index.api.php index deserialization

Priority HIGH 75

A vulnerability, which was classified as critical, has been found in PHPEMS up to 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00741 Published 2024-02-09 No fix listed CWE-502
TI-2023-06095 CVE-2023-6654 · GHSA-5rv2-vvmf-f7w8

PHPEMS Session Data session.cls.php deserialization

Priority MEDIUM 41

A vulnerability classified as critical was found in PHPEMS 6.x/7.x/8.x/9.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01666 Published 2023-12-10 No fix listed CWE-502