18 matches found
CVE-2020-12766
Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...
EUVD-2020-5051
Malware in sbrugna...
EUVD-2020-5049
Malware in sbrugna...
CVE-2020-12764
Gnuteca 3.8 allows file.php?folder=/= Directory Traversal...
GNUTeca Path Traversal Vulnerability
Solis Gnuteca is a library management system from Solis Brazil. The system includes features such as e-mail alerts, automated inventory, location tracking and user registration. A path traversal vulnerability exists in Solis GNUTeca version 3.8. The vulnerability stems from the failure of a...
Solis Gnuteca SQL Injection Vulnerability
Solis Gnuteca is a library management system from Solis Brazil. The system includes features such as e-mail alerts, automated inventory, location tracking and user registration. A SQL injection vulnerability exists in Solis Gnuteca version 3.8. The vulnerability stems from a database-based...
CVE-2020-12766
Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...
CVE-2020-12764
Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal...
CVE-2020-12766
Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...
CVE-2020-12764
Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal...
Directory traversal
Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal...
Sql injection
Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...
CVE-2020-12764
Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal...
CVE-2020-12764
CVE-2020-12764 affects Gnuteca 3.8, exposing a directory traversal in file.php?folder=/&file= that allows access to restricted paths. The description consistently states that the vulnerability arises from improper filtering of path elements, enabling traversal outside the intended directory. Publ...
CVE-2020-12766
CVE-2020-12766 affects Gnuteca 3.8 and is a SQL Injection in action=main:search:simpleSearch via the exemplaryStatusId parameter. The CVSS3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields base score 9.8 (CRITICAL); CVSS2 base 7.5 (HIGH). Impacts: confidentiality, integrity, and availability...
CVE-2020-12766
Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...
CVE-2020-12766: Improper Neutralization of Special Elements used in an SQL Command
Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...