TI-2013-06182 CVE-2013-10039 · GHSA-gww2-cgc8-8xg9
GestioIP 3.0 ip_checkhost.cgi RCE
Priority MEDIUM 47
A command injection vulnerability exists in GestioIP 3.0 commit ac67be and earlier in ip_checkhost.cgi.
Vulnerabilities
6 records
TI-2024-34149 CVE-2024-50861 · GHSA-mx7x-mmcr-wf43
The ip_mod_dns_key_form.cgi request in GestioIP v3.5.7 is vulnerable to Stored XSS.
Priority MEDIUM 60
The ip_mod_dns_key_form.cgi request in GestioIP v3.5.7 is vulnerable to Stored XSS.
TI-2024-34148 CVE-2024-50859 · GHSA-hg4r-9c4x-96jw
The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS.
Priority MEDIUM 55
The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS.
TI-2024-34147 CVE-2024-50858 · GHSA-mm92-9vfh-5m9g
Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF).
Priority HIGH 73
Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF).
TI-2024-34146 CVE-2024-50857 · GHSA-x7fx-57rj-7whh
The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS).
Priority MEDIUM 55
The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS).
TI-2024-32488 CVE-2024-48760 · GHSA-2qvv-vrv2-ppx8
An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the…
Priority HIGH 82
An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function.