CVEs published August 6, 2023
19 CVEs were published on August 6, 2023: 1 critical, 4 high.
- Published
- 19
- Critical
- 1
- High
- 4
- Medium
- 9
- Low
- 4
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- SourceCodester Free Hospital Management System for Small Pr…
- 3
- SourceCodester Inventory Management System
- 3
- cockpit-hq/cockpit
- 2
- mooSocial mooStore
- 2
- SourceCodester Resort Reservation System
- 2
- admidio/admidio
- 1
- Apache Software Foundation Apache Roller
- 1
- EmpowerID
- 1
- mooSocial mooTravel
- 1
- SourceCodester Hospital Management System
- 1
Critical 1
High 4
- CVE-2023-4196Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpitcockpit-hq/cockpit
- CVE-2023-4184SourceCodester Inventory Management System sell_return.php sql injectionSourceCodester Inventory Management System
- CVE-2023-4182SourceCodester Inventory Management System edit_sell.php sql injectionSourceCodester Inventory Management System
- CVE-2023-4180SourceCodester Free Hospital Management System for Small Practices login.php sql injectionSourceCodester Free Hospital Management System for Small Pr…
Medium, low and unrated 14
- CVE-2023-4192SourceCodester Resort Reservation System manage_user.php sql injectionSourceCodester Resort Reservation System
- CVE-2023-4191SourceCodester Resort Reservation System index.php file inclusionSourceCodester Resort Reservation System
- CVE-2023-4186SourceCodester Pharmacy Management System manage_website.php unrestricted uploadSourceCodester Pharmacy Management System
- CVE-2023-4185SourceCodester Online Hospital Management System patientlogin.php sql injectionSourceCodester Online Hospital Management System
- CVE-2023-4183SourceCodester Inventory Management System Password edit_update.php access controlSourceCodester Inventory Management System
- CVE-2023-4181SourceCodester Free Hospital Management System for Small Practices Redirect behavioral workflowSourceCodester Free Hospital Management System for Small Pr…
- CVE-2023-4179SourceCodester Free Hospital Management System for Small Practices sql injectionSourceCodester Free Hospital Management System for Small Pr…
- CVE-2023-37581Apache Roller: Roller's weblog category, weblog settings and file-upload features did not properly sanitize input could be exploited to perform Reflected Cross Site Scripting (XSS) even on a Roller site configured for untrusted users.Apache Software Foundation Apache Roller
- CVE-2023-4177EmpowerID Multi-Factor Authentication Code information disclosureEmpowerID
- CVE-2023-4176SourceCodester Hospital Management System appointmentapproval.php sql injectionSourceCodester Hospital Management System
- CVE-2023-4175mooSocial mooTravel cross site scriptingmooSocial mooTravel
- CVE-2023-4174mooSocial mooStore cross site scriptingmooSocial mooStore
- CVE-2023-4190Insufficient Session Expiration in admidio/admidioadmidio/admidio
- CVE-2023-4173mooSocial mooStore index cross site scriptingmooSocial mooStore