CVE-2020-12766

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

EUVD-2020-5049

Malware in sbrugna...

EUVD-2020-5051

Malware in sbrugna...

CVE-2020-12764

Gnuteca 3.8 allows file.php?folder=/= Directory Traversal...

GNUTeca Path Traversal Vulnerability

Solis Gnuteca is a library management system from Solis Brazil. The system includes features such as e-mail alerts, automated inventory, location tracking and user registration. A path traversal vulnerability exists in Solis GNUTeca version 3.8. The vulnerability stems from the failure of a...

Solis Gnuteca SQL Injection Vulnerability

Solis Gnuteca is a library management system from Solis Brazil. The system includes features such as e-mail alerts, automated inventory, location tracking and user registration. A SQL injection vulnerability exists in Solis Gnuteca version 3.8. The vulnerability stems from a database-based...

CVE-2020-12766

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

CVE-2020-12764

Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal...

CVE-2020-12766

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

CVE-2020-12764

Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal...

Sql injection

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

Directory traversal

Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal...

CVE-2020-12764

Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal...

CVE-2020-12764

CVE-2020-12764 affects Gnuteca 3.8, exposing a directory traversal in file.php?folder=/&file= that allows access to restricted paths. The description consistently states that the vulnerability arises from improper filtering of path elements, enabling traversal outside the intended directory. Publ...

CVE-2020-12766

CVE-2020-12766 affects Gnuteca 3.8 and is a SQL Injection in action=main:search:simpleSearch via the exemplaryStatusId parameter. The CVSS3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields base score 9.8 (CRITICAL); CVSS2 base 7.5 (HIGH). Impacts: confidentiality, integrity, and availability...

CVE-2020-12766

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...