CWE-473 · 3 records
PHP External Variable Modification
CVEs in this class
3 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
98Now | CVE-2023-36845Weaponized | Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variablejuniper · junos · CWE-473 | Critical9.8 | KEV | 95.0% | Aug 17, 2023 |
78This week | CVE-2023-36844Weaponized | Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variablesjuniper · junos · CWE-473 | Medium5.3 | KEV | 89.9% | Aug 17, 2023 |
30Monitor | CVE-2024-27489No exploit | An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.CWE-473 | High7.5 | — | 0.4% | Jul 19, 2024 |
- CVE-2023-3684598Now
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
CriticalCVSS 9.8KEVWeaponizedEPSS 95%juniper · junosAug 17, 2023
- CVE-2023-3684478This week
Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
MediumCVSS 5.3KEVWeaponizedEPSS 89%juniper · junosAug 17, 2023
- CVE-2024-2748930Monitor
An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.
HighCVSS 7.5No exploitEPSS 0%Jul 19, 2024