Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Grand Vice info Webopac 6.5.1, 7.2.3 Clear all filters
TI-2024-10208 CVE-2024-11018 · GHSA-4gq7-5m56-j2gf

Grand Vice info Webopac - Arbitrary File Upload

Priority MEDIUM 50

Webopac from Grand Vice info does not properly validate uploaded file types, allowing unauthenticated remote attackers to upload and execute webshells, which could lead to arbitrary code execution on the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00833 Published 2024-11-11 Fixed in 6.5.1, 7.2.3 CWE-434
TI-2024-10207 CVE-2024-11017 · GHSA-j5gv-q5p3-x979

Grand Vice info Webopac - Arbitrary File Upload

Priority MEDIUM 47

Webopac from Grand Vice info does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload and execute webshells, which could lead to arbitrary code execution on the server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00767 Published 2024-11-11 Fixed in 6.5.1, 7.2.3 CWE-434
TI-2024-10206 CVE-2024-11016 · GHSA-79c2-g2jr-h2qr

Grand Vice info Webopac - SQL Injection

Priority MEDIUM 50

Webopac from Grand Vice info has a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and delete database contents.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00558 Published 2024-11-11 Fixed in 6.5.1, 7.2.3 CWE-89