Vulnerability DatabaseCVE-2023-1971

CVE-2023-1971:
PHP vulnerability analysis and mitigation

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in yuan1994 tpAdmin 1.3.12. Affected is the function remote of the file application\admin\controller\Upload.php. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225408. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Source: NVD

Related PHP vulnerabilities:

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2026-21857	HIGH	8.3	PHP	redaxo/source	No	Yes	Jan 07, 2026
CVE-2025-68954	HIGH	7.5	PHP	github.com/pterodactyl/wings	No	Yes	Jan 06, 2026
CVE-2025-68456	HIGH	7	PHP	cpe:2.3:a:craftcms:craft_cms	No	Yes	Jan 05, 2026
CVE-2025-69197	MEDIUM	6.5	PHP	pterodactyl/panel	No	Yes	Jan 06, 2026
CVE-2026-22242	MEDIUM	4.9	PHP	coreshop/core-shop	No	Yes	Jan 07, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

A threat intelligence database

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."

David EstlickCISO

"Wiz provides a single pane of glass to see what is going on in our cloud environments."

Adam FletcherChief Security Officer

"We know that if Wiz identifies something as critical, it actually is."

Greg PoniatowskiHead of Threat and Vulnerability Management

Get a demo

CVE-2023-1971: PHP vulnerability analysis and mitigation