CVE-2017-15877

Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user database...

CVE-2017-15875

CVE-2017-15875 documents a SQL injection vulnerability in GPWeb Password Recovery, version 8.4.61. The vulnerability allows remote attackers to execute arbitrary SQL commands via the checkemail parameter. Connected sources confirm the affected product/version and the injection vector, but do not ...

CVE-2017-15876

GPWeb 8.4.61 is affected by an Unrestricted File Upload vulnerability allowing remote authenticated users to upload arbitrary files, including PHP shells. Multiple sources (NVD/CNVD/PRION/CVELIST) confirm the flaw exists in GPWeb 8.4.61 and enable uploading of unauthenticated? No—explicitly state...

CVE-2017-15877

The CVE-2017-15877 entry concerns GPWeb 8.4.61, where an Insecure Permissions issue in db.php allows remote attackers to view password and user databases. This is supported by multiple connected records (NVD entry and CNVD/PRION/CVELIST variants) referencing GPWeb 8.4.61 and information disclosur...

PT-2017-14256

Name of the Vulnerable Software and Affected Versions GPWeb version 8.4.61 Description The issue is related to insecure permissions in the db.php file, allowing remote attackers to access sensitive information, including passwords and user databases. Recommendations For GPWeb version 8.4.61, upda...

PT-2017-14255

Name of the Vulnerable Software and Affected Versions GPWeb version 8.4.61 Description The issue allows remote authenticated users to upload any type of file, including a PHP shell, due to an Unrestricted File Upload vulnerability. Recommendations For GPWeb version 8.4.61, update to a version tha...

PT-2017-14254

Name of the Vulnerable Software and Affected Versions GPWeb version 8.4.61 Description A SQL injection issue in the Password Recovery feature allows remote attackers to execute arbitrary SQL commands by manipulating the checkemail parameter. Recommendations For GPWeb version 8.4.61, consider...