Gambio

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Gambio records in CISA KEV

No Gambio vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Gambio Gx · all components

TI-2020-08860 CVE-2020-10984 · GHSA-p3w6-4fw6-pj7x

LOW 39

Gambio GX before 4.0.1.0 allows admin/admin.php CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00715 Published 2020-07-28 No fix listed CWE-352

TI-2020-08859 CVE-2020-10983 · GHSA-g2pj-29c7-96vw

LOW 25

Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.014 Published 2020-07-28 No fix listed CWE-89

TI-2020-08858 CVE-2020-10982 · GHSA-j2gp-5gr4-5w9f

LOW 25

Gambio GX before 4.0.1.0 allows SQL Injection in admin/gv_mail.php.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01371 Published 2020-07-28 No fix listed CWE-89

TI-2020-08861 CVE-2020-10985 · GHSA-m2cj-gv2p-qwgr

LOW 23

Gambio GX before 4.0.1.0 allows XSS in admin/coupon_admin.php.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2020-07-28 No fix listed CWE-79