# CVEs published 2023-01-28

7 CVEs were published on January 28, 2023: 0 critical, 1 high. Days are UTC.

- [CVE-2021-4315](https://cve.now/CVE-2021-4315.md): NYUCCL psiTurk experiment.py special elements used in a template engine (CVSS 5.5, NYUCCL psiTurk · psiturk)
- [CVE-2023-0563](https://cve.now/CVE-2023-0563.md): PHPGurukul Bank Locker Management System Assign Locker add-locker-form.php cross site scripting (CVSS 3.5, PHPGurukul Bank Locker Management System)
- [CVE-2023-0562](https://cve.now/CVE-2023-0562.md): PHPGurukul Bank Locker Management System Login index.php sql injection (CVSS 7.3, PHPGurukul Bank Locker Management System)
- [CVE-2023-0561](https://cve.now/CVE-2023-0561.md): SourceCodester Online Tours & Travels Management System s.php sql injection (CVSS 6.3, SourceCodester Online Tours & Travels Management System)
- [CVE-2023-0560](https://cve.now/CVE-2023-0560.md): SourceCodester Online Tours & Travels Management System practice\_pdf.php sql injection (CVSS 4.7, SourceCodester Online Tours & Travels Management System)
- [CVE-2023-23629](https://cve.now/CVE-2023-23629.md): Metabase subject to Improper Privilege Management (CVSS 6.3, metabase)
- [CVE-2023-23628](https://cve.now/CVE-2023-23628.md): Metabase subject to Exposure of Sensitive Information to an Unauthorized Actor (CVSS 5.7, metabase)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-01-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.