CVE-2025-24924

Certain functionality within GMOD Apollo does not require authentication when passed with an administrative username...

CVE-2025-23410 GMOD Apollo Relative Path Traversal

When uploading organism or sequence data via the web interface, GMOD Apollo will unzip and inspect the files and will not check for path traversal in supported archive types...

CVE-2025-23410 GMOD Apollo Relative Path Traversal

When uploading organism or sequence data via the web interface, GMOD Apollo will unzip and inspect the files and will not check for path traversal in supported archive types...

CVE-2025-23410

GMOD Apollo is affected by a relative path traversal vulnerability in the web interface when uploading organism/sequence data. The root cause is that uploaded archives are unzip-inspected but not checked for path traversal in supported archive types, potentially allowing access to restricted path...

CVE-2025-21092 GMOD Apollo Incorrect Privilege Assignment

GMOD Apollo does not have sufficient logical or access checks when updating a user's information. This could result in an attacker being able to escalate privileges for themselves or others...

CVE-2025-21092

GMOD Apollo (CVE-2025-21092) contains insufficient logical/access checks when updating a user’s information, enabling potential privilege escalation for attackers. Multiple sources (NVD, Red Hat, Alpine, CVE lists, CNNVD, ICS advisory) describe the issue as an authorization/privilege-assignment f...

CVE-2025-21092 GMOD Apollo Incorrect Privilege Assignment

GMOD Apollo does not have sufficient logical or access checks when updating a user's information. This could result in an attacker being able to escalate privileges for themselves or others...

gmod.827538.n3.nabble.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1184729 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

gmod-fan.ru Open Redirect vulnerability

Vulnerable URL: http://gmod-fan.ru/forum/away.php?s=http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 143089 VIP website status:| No Coordinated...

CVE-2008-3781

Cross-site scripting XSS vulnerability in GMOD GBrowse before 1.69 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in GMOD GBrowse before 1.69 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3781

The CVE-2008-3781 entry concerns GMOD GBrowse prior to version 1.69, which is affected by a cross-site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents confirm the product and version range but ...

CVE-2008-3781

Cross-site scripting XSS vulnerability in GMOD GBrowse before 1.69 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...