CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 01/02/2026 |
| CVE-2021-47912 | 보통5.4 | PHP Melody version 3.0 contains multiple non-persistent cross-site scripting vulnerabilities in categories, import, and user import files. Attackers can inject malicious scripts through unvalidated parameters to execute client-side attacks and potentially hijack user sessions. | 01/02/2026 |
| CVE-2018-5211 | 심각9.8 | PHP Melody version 2.7.1 suffer from SQL Injection Time-based attack on the page ajax.php with the parameter playlist. | 09/01/2018 |
| CVE-2017-15081 | 심각9.8 | In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php. | 24/10/2017 |
| CVE-2017-15648 | 보통6.1 | In PHPSUGAR PHP Melody before 2.7.3, page_manager.php has XSS via the page_title parameter. | 19/10/2017 |
| CVE-2017-15579 | 심각9.8 | In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.php. | 18/10/2017 |
| CVE-2017-15578 | 높음8.8 | In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php. | 18/10/2017 |
| CVE-2009-2895 | 높음7.5 | SQL injection vulnerability in rss.php in Ultimate Regnow Affiliate (URA) 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. | 20/08/2009 |