Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: Grand Vice info Clear all filters
TI-2024-10211 CVE-2024-11021 · GHSA-jph9-x673-x349

Grand Vice info Webopac - Stored XSS

Priority LOW 24

Webopac from Grand Vice info has Stored Cross-site Scripting vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00303 Published 2024-11-11 Fixed in 6.5.3, 7.2.1 CWE-79
TI-2024-10210 CVE-2024-11020 · GHSA-v6fc-jm83-8p5x

Grand Vice info Webopac7 - SQL Injection

Priority MEDIUM 49

Webopac from Grand Vice info has a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and delete database contents.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00468 Published 2024-11-11 Fixed in 6.5.1, 7.2.3 CWE-89
TI-2024-10209 CVE-2024-11019 · GHSA-m7q4-j5c4-6pjq

Grand Vice info Webopac7 - Reflected XSS

Priority LOW 27

Webopac from Grand Vice info has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript code in the user's browser through phishing techniques.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2024-11-11 Fixed in 6.5.1, 7.2.3 CWE-79
TI-2024-10208 CVE-2024-11018 · GHSA-4gq7-5m56-j2gf

Grand Vice info Webopac - Arbitrary File Upload

Priority MEDIUM 50

Webopac from Grand Vice info does not properly validate uploaded file types, allowing unauthenticated remote attackers to upload and execute webshells, which could lead to arbitrary code execution on the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00833 Published 2024-11-11 Fixed in 6.5.1, 7.2.3 CWE-434
TI-2024-10207 CVE-2024-11017 · GHSA-j5gv-q5p3-x979

Grand Vice info Webopac - Arbitrary File Upload

Priority MEDIUM 47

Webopac from Grand Vice info does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload and execute webshells, which could lead to arbitrary code execution on the server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00767 Published 2024-11-11 Fixed in 6.5.1, 7.2.3 CWE-434
TI-2024-10206 CVE-2024-11016 · GHSA-79c2-g2jr-h2qr

Grand Vice info Webopac - SQL Injection

Priority MEDIUM 50

Webopac from Grand Vice info has a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and delete database contents.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00558 Published 2024-11-11 Fixed in 6.5.1, 7.2.3 CWE-89
TI-2021-19003 CVE-2021-42839 · GHSA-mhvw-gjfc-ccqf

Grand Vice info Co. webopac7 - Arbitrary File Upload

Priority MEDIUM 43

Grand Vice info Co. webopac7 file upload function fails to filter special characters.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02427 Published 2021-11-15 No fix listed CWE-434
TI-2021-19002 CVE-2021-42838 · GHSA-rj3h-j446-4cfq

Grand Vice info Co. webopac7 - Reflected XSS

Priority LOW 28

Grand Vice info Co. webopac7 book search field parameter does not properly restrict the input of special characters, thus unauthenticated attackers can inject JavaScript syntax remotely, and further perform reflective XS…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0063 Published 2021-11-15 No fix listed CWE-79