Vulnerabilities

TI-2008-05993 CVE-2008-6300 · GHSA-cvgx-4cqq-9vc8

Galatolo WebManager 1.3a allows remote attackers to bypass authentication and gain…

LOW 38

Galatolo WebManager 1.3a allows remote attackers to bypass authentication and gain administrative access by setting the (1) gwm_user and (2) gwm_pass cookies to admin.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02619 Published 2009-02-26 No fix listed CWE-287

TI-2008-05942 CVE-2008-6249 · GHSA-xgfc-f3gp-3mp4

SQL injection vulnerability in plugins/users/index.php in Galatolo WebManager 1.3a and…

LOW 35

SQL injection vulnerability in plugins/users/index.php in Galatolo WebManager 1.3a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2009-02-23 No fix listed CWE-89

TI-2008-05802 CVE-2008-6108 · GHSA-vxg4-2g9m-64xg

Cross-site scripting (XSS) vulnerability in result.php in Galatolo WebManager (GWM) 1.0…

LOW 22

Cross-site scripting (XSS) vulnerability in result.php in Galatolo WebManager (GWM) 1.0 allows remote attackers to inject arbitrary web script or HTML via the key parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01093 Published 2009-02-10 No fix listed CWE-79

TI-2008-02582 CVE-2008-2700 · GHSA-xr7f-4hm8-fh72

SQL injection vulnerability in view.php in Galatolo WebManager 1.0 and earlier allows…

LOW 35

SQL injection vulnerability in view.php in Galatolo WebManager 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2008-06-13 No fix listed CWE-89

TI-2008-02581 CVE-2008-2699 · GHSA-qgr7-56g7-hq4g

Multiple directory traversal vulnerabilities in Galatolo WebManager (GWM) 1.0 allow…

LOW 37

Multiple directory traversal vulnerabilities in Galatolo WebManager (GWM) 1.0 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in (1) the plugin parameter to admin/plu…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02286 Published 2008-06-13 No fix listed CWE-22