EUVD-2020-3382

Malware in sbrugna...

Sql injection

Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php...

CVE-2020-10983

Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php...

CVE-2020-10983: Improper Neutralization of Special Elements used in an SQL Command

Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php...

PT-2020-12468

Name of the Vulnerable Software and Affected Versions Gambio GX versions prior to 4.0.1.0 Description The issue allows SQL Injection in the admin/mobile.php file. This could potentially lead to unauthorized access or manipulation of database content. No information is provided about the estimated...

Design/Logic Flaw

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobilename parameter...

PT-2018-15433

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP. The "admin/mobile.php?rec=system&act=update" endpoint has a cross-site scripting XSS issue via the mobile name parameter. Recommendations For DouPHP version 1.5...

CVE-2018-20563: Improper Neutralization of Input During Web Page Generation

An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobilename parameter...