Read the docs

Gps-server

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Gps-server records in CISA KEV

No Gps-server vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gps Tracking Software 2 records MEDIUM

Records

2 records in Gps Tracking Software · all components

TI-2017-12550 CVE-2017-17098 · GHSA-pmxm-7vm3-c6vr

The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self…

Priority MEDIUM 52

The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self hosted) through 3.0 allows remote attackers to inject arbitrary PHP code via a crafted request that is mishandled during admin log view…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06642 Published 2018-01-02 No fix listed CWE-94
TI-2017-12549 CVE-2017-17097 · GHSA-pqjh-4hfv-gw8h

gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure…

Priority MEDIUM 52

gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords upon an unauthenticated request, and then sends e-mail with a predictable (date-based) password to t…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06946 Published 2018-01-02 No fix listed CWE-640
Open these records in search →