CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Prion•added 2024/02/12 10:15 p.m.•31 views

Deserialization of untrusted data

Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function...

7.5CVSS7.7AI score0.67111EPSS

Exploits4References1Affected Software1

CVE•added 2024/02/12 12:0 a.m.•61 views

CVE-2024-23759

CVE-2024-23759 affects Gambio Online Webshop up to version 4.9.2.0 and earlier. The issue is a deserialization of untrusted data in the Parcelshopfinder/AddAddressBookEntry function, enabling remote attackers to execute arbitrary code via an unauthenticated HTTP POST request. Root cause is insecu...

9.8CVSS9.5AI score0.67111EPSS

Exploits4References1Affected Software1

Cvelist•added 2024/02/12 12:0 a.m.•17 views

CVE-2024-23759

Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function...

9.8AI score0.67111EPSS

Exploits4References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by