CWE-473: PHP External Variable Modification
A PHP application does not properly protect against the modification of variables from external sources, such as query parameters or cookies. This can expose the application to numerous weaknesses that would not exist otherwise.
4 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2026-28411 — WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`
- CVE-2026-40285 — WeGIA has SQL Injection via Session Variable Override in DespachoControle.php
Recently published
- CVE-2026-40285 — WeGIA has SQL Injection via Session Variable Override in DespachoControle.php
- CVE-2026-28411 — WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`