7 matches found
EUVD-2020-3382
Malware in sbrugna...
Sql injection
Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php...
CVE-2020-10983
Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php...
CVE-2020-10983: Improper Neutralization of Special Elements used in an SQL Command
Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php...
Design/Logic Flaw
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobilename parameter...
PT-2018-15433
Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP. The "admin/mobile.php?rec=system&act=update" endpoint has a cross-site scripting XSS issue via the mobile name parameter. Recommendations For DouPHP version 1.5...
CVE-2018-20563: Improper Neutralization of Input During Web Page Generation
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobilename parameter...