Martem TELEM-GW6/GWM Critical Function Missing Authentication Vulnerability

Martem specializes in providing remote control systems for monitoring and controlling distribution networks, and its customers include distribution companies as well as industrial and transportation companies that own their own power grids. A critical function missing authentication vulnerability...

Martem TELEM-GW6/GWM (Update B)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Martem Equipment : TELEM-GW6/GWM --------- Begin Update B Part 1 of 5 -------- Vulnerabilities : Missing Authentication for Critical Function, Incorrect Default Permissions, Resource Exhaustion,...

CVE-2008-6108

CVE-2008-6108 is a cross-site scripting (XSS) vulnerability in Galatolo WebManager (GWM) 1.0, exploitable via result.php and the key parameter. The issue allows remote attackers to inject arbitrary web script or HTML. It is tracked in multiple feeds (NVD, CVE lists, Prion, etc.). The NVD entry li...

CVE-2008-6108: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in result.php in Galatolo WebManager GWM 1.0 allows remote attackers to inject arbitrary web script or HTML via the key parameter...

CVE-2008-2699

Galatolo WebManager (GWM) 1.0 is affected by directory traversal vulnerabilities that allow remote attackers to include and execute arbitrary local files via directory traversal sequences in (1) the plugin parameter to admin/plugins.php or (2) the com parameter to index.php. This is documented in...

CVE-2008-2699: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Galatolo WebManager GWM 1.0 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in 1 the plugin parameter to admin/plugins.php or 2 the com parameter to index.php...