# CVEs published 2023-08-06

19 CVEs were published on August 6, 2023: 1 critical, 4 high. Days are UTC.

- [CVE-2023-4192](https://cve.now/CVE-2023-4192.md): SourceCodester Resort Reservation System manage\_user.php sql injection (CVSS 6.3, SourceCodester Resort Reservation System)
- [CVE-2023-4191](https://cve.now/CVE-2023-4191.md): SourceCodester Resort Reservation System index.php file inclusion (CVSS 6.3, SourceCodester Resort Reservation System)
- [CVE-2023-4196](https://cve.now/CVE-2023-4196.md): Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit (CVSS 8.3, cockpit-hq/cockpit)
- [CVE-2023-4195](https://cve.now/CVE-2023-4195.md): PHP Remote File Inclusion in cockpit-hq/cockpit (CVSS 9.9, cockpit-hq/cockpit)
- [CVE-2023-4186](https://cve.now/CVE-2023-4186.md): SourceCodester Pharmacy Management System manage\_website.php unrestricted upload (CVSS 6.3, SourceCodester Pharmacy Management System)
- [CVE-2023-4185](https://cve.now/CVE-2023-4185.md): SourceCodester Online Hospital Management System patientlogin.php sql injection (CVSS 6.3, SourceCodester Online Hospital Management System)
- [CVE-2023-4184](https://cve.now/CVE-2023-4184.md): SourceCodester Inventory Management System sell\_return.php sql injection (CVSS 7.3, SourceCodester Inventory Management System)
- [CVE-2023-4183](https://cve.now/CVE-2023-4183.md): SourceCodester Inventory Management System Password edit\_update.php access control (CVSS 4.3, SourceCodester Inventory Management System)
- [CVE-2023-4182](https://cve.now/CVE-2023-4182.md): SourceCodester Inventory Management System edit\_sell.php sql injection (CVSS 7.3, SourceCodester Inventory Management System)
- [CVE-2023-4181](https://cve.now/CVE-2023-4181.md): SourceCodester Free Hospital Management System for Small Practices Redirect behavioral workflow (CVSS 5.4, SourceCodester Free Hospital Management System for Small Pr…)
- [CVE-2023-4180](https://cve.now/CVE-2023-4180.md): SourceCodester Free Hospital Management System for Small Practices login.php sql injection (CVSS 7.3, SourceCodester Free Hospital Management System for Small Pr…)
- [CVE-2023-4179](https://cve.now/CVE-2023-4179.md): SourceCodester Free Hospital Management System for Small Practices sql injection (CVSS 6.3, SourceCodester Free Hospital Management System for Small Pr…)
- [CVE-2023-37581](https://cve.now/CVE-2023-37581.md): Apache Roller: Roller's weblog category, weblog settings and file-upload features did not properly sanitize input could be exploited to perform Reflected Cross Site Scripting (XSS) even on a Roller site configured for untrusted users. (no CVSS, Apache Software Foundation Apache Roller)
- [CVE-2023-4177](https://cve.now/CVE-2023-4177.md): EmpowerID Multi-Factor Authentication Code information disclosure (CVSS 2.6, EmpowerID)
- [CVE-2023-4176](https://cve.now/CVE-2023-4176.md): SourceCodester Hospital Management System appointmentapproval.php sql injection (CVSS 6.3, SourceCodester Hospital Management System)
- [CVE-2023-4175](https://cve.now/CVE-2023-4175.md): mooSocial mooTravel cross site scripting (CVSS 3.5, mooSocial mooTravel)
- [CVE-2023-4174](https://cve.now/CVE-2023-4174.md): mooSocial mooStore cross site scripting (CVSS 3.5, mooSocial mooStore)
- [CVE-2023-4190](https://cve.now/CVE-2023-4190.md): Insufficient Session Expiration in admidio/admidio (CVSS 6.5, admidio/admidio)
- [CVE-2023-4173](https://cve.now/CVE-2023-4173.md): mooSocial mooStore index cross site scripting (CVSS 3.5, mooSocial mooStore)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-08-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.