Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Grand Vice info Webopac7 6.5.1, 7.2.3 Clear all filters
TI-2024-10210 CVE-2024-11020 · GHSA-v6fc-jm83-8p5x

Grand Vice info Webopac7 - SQL Injection

Priority MEDIUM 49

Webopac from Grand Vice info has a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and delete database contents.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00468 Published 2024-11-11 Fixed in 6.5.1, 7.2.3 CWE-89
TI-2024-10209 CVE-2024-11019 · GHSA-m7q4-j5c4-6pjq

Grand Vice info Webopac7 - Reflected XSS

Priority LOW 27

Webopac from Grand Vice info has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript code in the user's browser through phishing techniques.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2024-11-11 Fixed in 6.5.1, 7.2.3 CWE-79