Vulnerabilities

TI-2020-10149 CVE-2020-12764 · GHSA-j8hf-m5mw-qxmx

Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal.

LOW 27

Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01323 Published 2020-05-09 No fix listed CWE-22

TI-2020-10150 CVE-2020-12765 · GHSA-995g-c6vj-4959

LOW 27

Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01299 Published 2020-05-09 No fix listed CWE-22

TI-2020-10151 CVE-2020-12766 · GHSA-gr85-jmxj-9p7g

MEDIUM 44

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01034 Published 2020-05-09 No fix listed CWE-89