Skip to content

CVEs

Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.

CVEs: PHP · Php Script Index
CVEVendor · productExploitationCVSSEPSSPublished
CVE-2006-1558Cross-site scripting (XSS) vulnerability in search.php in PHP Script Index allows remote attackers to inject arbitrary web script or HTML via the search parameter.Php · Php Script IndexPossible–1.5%2006-03-31
CVE-2006-1559SQL injection vulnerability in PHP Script Index allows remote attackers to execute arbitrary SQL commands via the search parameter. NOTE: the provenance of this information is unk…Php · Php Script IndexPossible–1.1%2006-03-31

Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.