Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function...
9.8CVSS6AI score0.47829EPSS
SaveExploits4References1
OSV•added 2020/07/28 9:15 p.m.•6 views
CVE-2020-10985
Gambio GX before 4.0.1.0 allows XSS in admin/couponadmin.php...
