Vendors / Sistemagpweb Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 1
Exploited now Sistemagpweb records in CISA KEV No Sistemagpweb vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user database.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01435 · Published 2017-12-18 · No fix listed CWE-732
Priority MEDIUM 45
SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL commands via the "checkemail" parameter.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01288 · Published 2017-12-18 · No fix listed CWE-89
Priority LOW 36
Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users to upload any type of file, including a PHP shell.
CVSS 3.0 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02206 · Published 2017-12-18 · No fix listed CWE-434
Open these records in search → All records by CVSS severity
2 1 0 0 0
