Advisories · Technology

PHPEMS.

Every CVE that names PHPEMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-6573 CVE record

CVSS 5.3 Medium

PHPEMS Instant Exam Creation exams.master.php temppage server-side request forgery
- PHPEMS
- Server-side request forgery (SSRF)
Not analysed yet 19 Apr 2026
CVE-2026-3946 CVE record

CVSS 5.1 Medium

PHPEMS index.php cross site scripting
- PHPEMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 11 Mar 2026
CVE-2025-15405 CVE record

CVSS 5.3 Medium

PHPEMS cross-site request forgery
- PHPEMS
- Cross-site request forgery (CSRF)
- Broken access control
Not analysed yet 1 Jan 2026
CVE-2025-15244 CVE record

CVSS 6.3 Medium

PHPEMS Purchase Request race condition
- PHPEMS
- Race condition
Not analysed yet 30 Dec 2025
CVE-2025-15242 CVE record

CVSS 2.3 Low

PHPEMS Coupon race condition
- PHPEMS
- Race condition
Not analysed yet 30 Dec 2025
CVE-2024-1353 CVE record

CVSS 6.3 Medium

PHPEMS index.api.php index deserialization
- PHPEMS
- Insecure deserialization
Not analysed yet 9 Feb 2024
CVE-2023-6472 CVE record

CVSS 2.4 Low

PHPEMS Content Section api.cls.php cross site scripting
- PHPEMS
- Cross-site scripting (XSS)
Not analysed yet 2 Dec 2023