Vulnerabilities

TI-2019-11672 CVE-2019-15572 · GHSA-65jc-f2w3-r364

Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php.

MEDIUM 45

Gesior-AAC before 2019-05-01 allows ServiceCategoryID SQL injection in shop.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01371 Published 2019-08-26 No fix listed CWE-89

TI-2019-11673 CVE-2019-15573 · GHSA-m377-xp67-f8vv

MEDIUM 45

Gesior-AAC before 2019-05-01 allows SQL injection in tankyou.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01371 Published 2019-08-26 No fix listed CWE-89

TI-2019-11674 CVE-2019-15574 · GHSA-grmv-p9vf-x5xx

MEDIUM 45

Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01371 Published 2019-08-26 No fix listed CWE-89