CWE-473

5 CVEs classified under CWE-473. Browse by severity and year.

Top CVEs for CWE-473
CVESeverityScorePublishedSummary
CVE-2026-28411Critical9.82026-02-27WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, an unsafe use of the `extract()` function on the `$_REQUEST` superglobal allows an…
CVE-2023-36845Critical9.82023-08-17A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-bas…
CVE-2026-40285High8.82026-04-17WeGIA is a web manager for charitable institutions. Versions prior to 3.6.10 contain a SQL injection vulnerability in dao/memorando/UsuarioDAO.php. The cpf_usu…
CVE-2024-27489High7.52024-07-19An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.
CVE-2023-36844Medium5.32023-08-17A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cont…
All CVEs classified under CWE-473 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-40285High8.82026-04-17WeGIA is a web manager for charitable institutions. Versions prior to 3.6.10 contain a SQL injection vulnerability in dao/memorando/UsuarioDAO.php. The cpf_usu…
CVE-2026-28411Critical9.82026-02-27WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, an unsafe use of the `extract()` function on the `$_REQUEST` superglobal allows an…
CVE-2024-27489High7.52024-07-19An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.
CVE-2023-36845Critical9.82023-08-17A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-bas…
CVE-2023-36844Medium5.32023-08-17A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cont…