Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Gps-server Component: Gps Tracking Software Clear all filters
TI-2017-12550 CVE-2017-17098 · GHSA-pmxm-7vm3-c6vr

The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self…

Priority MEDIUM 52

The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self hosted) through 3.0 allows remote attackers to inject arbitrary PHP code via a crafted request that is mishandled during admin log view…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06642 Published 2018-01-02 No fix listed CWE-94
TI-2017-12549 CVE-2017-17097 · GHSA-pqjh-4hfv-gw8h

gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure…

Priority MEDIUM 52

gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords upon an unauthenticated request, and then sends e-mail with a predictable (date-based) password to t…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06946 Published 2018-01-02 No fix listed CWE-640