EUVD-2020-5051

Malware in sbrugna...

CVE-2020-12764

Gnuteca 3.8 allows file.php?folder=/= Directory Traversal...

CVE-2020-12766

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

CVE-2020-12764

Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal...

Sql injection

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...

Directory traversal

Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal...

CVE-2020-12764

Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal...

CVE-2020-12764

CVE-2020-12764 affects Gnuteca 3.8, exposing a directory traversal in file.php?folder=/&file= that allows access to restricted paths. The description consistently states that the vulnerability arises from improper filtering of path elements, enabling traversal outside the intended directory. Publ...

CVE-2020-12766

Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter...