Native-php-cms Project Native-php-cms — known CVE vulnerabilities

Every CVE whose affected-product data names Native-php-cms Project Native-php-cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2021-36503 — CVSS 9.8 (critical): SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php…
• CVE-2025-0482 — CVSS 7.3 (high): A vulnerability, which was classified as critical, was found in Fanli2012 native-php-cms 1.0. This affects an unknown part of the file…
• CVE-2025-0488 — CVSS 6.3 (medium): A vulnerability classified as critical has been found in Fanli2012 native-php-cms 1.0. This affects an unknown part of the file…
• CVE-2025-0489 — CVSS 6.3 (medium): A vulnerability classified as critical was found in Fanli2012 native-php-cms 1.0. This vulnerability affects unknown code of the file…
• CVE-2025-0490 — CVSS 6.3 (medium): A vulnerability, which was classified as critical, has been found in Fanli2012 native-php-cms 1.0. This issue affects some unknown…
• CVE-2025-0483 — CVSS 3.5 (low): A vulnerability has been found in Fanli2012 native-php-cms 1.0 and classified as problematic. This vulnerability affects unknown code of…