Advisories · Weakness
CWE-473.
Every Advisory and CVE whose sources give the weakness CWE-473, newest first.
- CVSS 8.8 High
WeGIA has SQL Injection via Session Variable Override in DespachoControle.php
- LabRedesCefetRJ WeGIA
- SQL injection
- CWE-302
- CVSS 9.8 CriticalCritical · CVSS 9+
WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`
- LabRedesCefetRJ WeGIA
- Authentication bypass
- CWE-473
- CVSS 7.5 High
An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.
- CWE-473
- CWE-791
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
- Juniper Networks Junos OS
- CWE-473
- CVSS 5.3 MediumCritical · KEVKEV
Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
- Juniper Networks Junos OS
- CWE-473