Vulnerabilities

TI-2017-11624 CVE-2017-15877 · GHSA-h5g3-vpqv-852h

Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers…

MEDIUM 45

Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user database.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01435 Published 2017-12-18 No fix listed CWE-732

TI-2017-11623 CVE-2017-15876 · GHSA-f949-967p-47p8

Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users…

LOW 36

Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users to upload any type of file, including a PHP shell.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02206 Published 2017-12-18 No fix listed CWE-434

TI-2017-11622 CVE-2017-15875 · GHSA-cxp2-h7r9-5qhc

SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers…

MEDIUM 45

SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL commands via the "checkemail" parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01288 Published 2017-12-18 No fix listed CWE-89

Vulnerabilities

Filters

Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers…

Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users…

SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers…