Sql injection

Gambio GX before 4.0.1.0 allows SQL Injection in admin/gvmail.php...

Design/Logic Flaw

Gambio GX before 4.0.1.0 allows XSS in admin/couponadmin.php...

Cross site request forgery (csrf)

Gambio GX before 4.0.1.0 allows admin/admin.php CSRF...

Sql injection

Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php...

CVE-2020-10982

CVE-2020-10982 affects Gambio GX compromised versions prior to 4.0.1.0, where the admin/gv_mail.php endpoint is vulnerable to SQL Injection. The provided documents confirm the vulnerable component (admin/gv_mail.php) and the flaw type (SQL Injection) but do not disclose exploitation status, affec...

CVE-2020-10982

Gambio GX before 4.0.1.0 allows SQL Injection in admin/gvmail.php...

CVE-2020-10983

Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php...

CVE-2020-10984

Gambio GX (before 4.0.1.0) contains a CSRF vulnerability in admin/admin.php. The CVE entry CVE-2020-10984 documents a cross-site request forgery flaw affecting the admin interface; no explicit remediation is provided in the connected sources. The public references confirm the affected product/ver...

CVE-2020-10984

Gambio GX before 4.0.1.0 allows admin/admin.php CSRF...

CVE-2020-10985

Gambio GX before 4.0.1.0 allows XSS in admin/couponadmin.php...

CVE-2020-10985

CVE-2020-10985 affects Gambio GX before 4.0.1.0 with a reflected/XSS vulnerability in admin/coupon_admin.php. The available documents do not specify the exact root cause or input/component details beyond the file path, nor any official remediation. No exploitation status or in-the-wild data is pr...

Denial of Service Vulnerability in Mitsubishi Electric Corporation GX Works2 (CNVD-2020-49074 )

GX Work2 is a PLC programming software developed by Mitsubishi Electric Automation Co., Ltd. for PLC design, debugging, maintenance and other work, which is widely used in electric power, machinery manufacturing, iron and steel, petroleum, chemical and other industrial control fields. A denial of...

Denial of Service Vulnerability in Mitsubishi Electric Corporation GX Works2 (CNVD-2020-49072 )

GX Work2 is a PLC programming software developed by Mitsubishi Electric Automation Co., Ltd. for PLC design, debugging, maintenance and other work, which is widely used in electric power, machinery manufacturing, iron and steel, petroleum, chemical and other industrial control fields. A denial of...

Denial of Service Vulnerability in Mitsubishi Electric Corporation GX Works2 (CNVD-2020-49073)

GX Work2 is a PLC programming software developed by Mitsubishi Electric Automation Co., Ltd. for PLC design, debugging, maintenance and other work, which is widely used in electric power, machinery manufacturing, iron and steel, petroleum, chemical and other industrial control fields. A denial of...

Denial of Service Vulnerability in Mitsubishi Electric Corporation GX Works2

GX Work2 is a PLC programming software developed by Mitsubishi Electric Automation Co., Ltd. for PLC design, debugging, maintenance and other work, which is widely used in electric power, machinery manufacturing, iron and steel, petroleum, chemical and other industrial control fields. A denial of...

CVE-2020-5603

Uncontrolled resource consumption vulnerability in Mitsubishi Electoric FA Engineering Software CPU Module Logging Configuration Tool Ver. 1.94Y and earlier, CW Configurator Ver. 1.010L and earlier, EM Software Development Kit EM Configurator Ver. 1.010L and earlier, GT Designer3 GOT2000 Ver...

Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series vulnerable to cleartext transmission of sensitive information

Overview Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series contain a vulnerability that allows cleartext transmission of sensitive information CWE-319 between CPU modules and GX Works3 and/or GX Works2. Impact If this vulnerability is exploited, disclosure or alteration of information,...

Unspecified Vulnerability in Multiple Mitsubishi Electric Products

The Mitsubishi Electric MELSEC iQ-R series is a programmable logic controller from Mitsubishi Electric. A security vulnerability exists in a number of Mitsubishi Electric products. The vulnerability, which arises from the use of cleartext communication between a CPU module and GX Works3 or GX...

CVE-2020-5594

Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sensitive information between CPU modules and GX Works3 and/or GX Works2 via unspecified vectors...

CVE-2020-5594

Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sensitive information between CPU modules and GX Works3 and/or GX Works2 via unspecified vectors...