CWE-473 · Input Validation and Logic
PHP External Variable Modification
3CVEs
SortMost likely exploited
3 CVEs with CWE-473 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-36845In CISA KEVExploitedJuniper J-Web - Remote Code ExecutionJuniper Networks · Junos OS · CVSS 9.8 · 2023-08-17 | 9.8 | 95% | 2023-08-17 |
| CVE-2023-36844In CISA KEVExploitedJuniper Devices - Remote Code ExecutionJuniper Networks · Junos OS · CVSS 5.3 · 2023-08-17 | 5.3 | 90% | 2023-08-17 |
| CVE-2024-27489An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.No vendor recorded · CVSS 7.5 · 2024-07-19 | 7.5 | 0.4% | 2024-07-19 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.