Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Freeguppy records in CISA KEVNo Freeguppy vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02075 · Published 2023-05-17 · No fix listed CWE-434
Priority LOW 37
SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands via the lng parameter.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0199 · Published 2010-05-06 · No fix listed CWE-89
Open these records in search →