# CVEs published 2023-02-11

5 CVEs were published on February 11, 2023: 0 critical, 2 high. Days are UTC.

- [CVE-2023-0783](https://cve.now/CVE-2023-0783.md): EcShop PHP File template.php unrestricted upload (CVSS 4.7, EcShop)
- [CVE-2023-0782](https://cve.now/CVE-2023-0782.md): Tenda AC23 httpd formGetSysToolDDNS out-of-bounds write (CVSS 7.2, Tenda AC23)
- [CVE-2023-0781](https://cve.now/CVE-2023-0781.md): SourceCodester Canteen Management System removeOrder.php query sql injection (CVSS 6.3, SourceCodester Canteen Management System)
- [CVE-2023-0127](https://cve.now/CVE-2023-0127.md): A command injection vulnerability in the firmware\_update command, in the device's restricted telnet interface, allows an authenticated attac (CVSS 7.8, D-Link DWL-2600AP with firmware)
- [CVE-2023-0780](https://cve.now/CVE-2023-0780.md): Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit (CVSS 4.0, cockpit-hq/cockpit)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-02-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.