# CVEs published 2023-04-02 11 CVEs were published on April 2, 2023: 0 critical, 2 high. Days are UTC. - [CVE-2023-1800](https://cve.now/CVE-2023-1800.md): sjqzhang go-fastdfs File Upload uploa upload path traversal (CVSS 7.3, sjqzhang go-fastdfs ยท github.com/sjqzhang/go-fastdfs) - [CVE-2023-1799](https://cve.now/CVE-2023-1799.md): EyouCMS login.php cross site scripting (CVSS 3.5, EyouCMS) - [CVE-2023-1798](https://cve.now/CVE-2023-1798.md): EyouCMS login.php cross site scripting (CVSS 3.5, EyouCMS) - [CVE-2023-1797](https://cve.now/CVE-2023-1797.md): OTCMS unrestricted upload (CVSS 6.3, OTCMS) - [CVE-2023-1796](https://cve.now/CVE-2023-1796.md): SourceCodester Employee Payslip Generator Create News cross site scripting (CVSS 2.4, SourceCodester Employee Payslip Generator) - [CVE-2023-1795](https://cve.now/CVE-2023-1795.md): SourceCodester Gadget Works Online Ordering System GET Parameter index.php cross site scripting (CVSS 3.5, SourceCodester Gadget Works Online Ordering System) - [CVE-2023-1794](https://cve.now/CVE-2023-1794.md): SourceCodester Police Crime Record Management System GET Parameter casedetails.php cross site scripting (CVSS 3.5, SourceCodester Police Crime Record Management System) - [CVE-2023-1793](https://cve.now/CVE-2023-1793.md): SourceCodester Police Crime Record Management System GET Parameter assigncase.php sql injection (CVSS 6.3, SourceCodester Police Crime Record Management System) - [CVE-2023-1792](https://cve.now/CVE-2023-1792.md): SourceCodester Simple Mobile Comparison Website GET Parameter manage\_field.php sql injection (CVSS 6.3, SourceCodester Simple Mobile Comparison Website) - [CVE-2023-1791](https://cve.now/CVE-2023-1791.md): SourceCodester Simple Task Allocation System manage\_user.php sql injection (CVSS 6.3, SourceCodester Simple Task Allocation System) - [CVE-2023-27025](https://cve.now/CVE-2023-27025.md): An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrar (CVSS 7.5, com.ruoyi:ruoyi) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2023-04-02 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.