EUVD-2018-8277

Malware in sbrugna...

EUVD-2018-7057

Malware in sbrugna...

CVE-2018-16437

Gxlcms 2.0 before bug fix 20180915 has Directory Traversal exploitable by an administrator...

Directory traversal

Gxlcms 2.0 before bug fix 20180915 has Directory Traversal exploitable by an administrator...

Sql injection

Gxlcms 2.0 before bug fix 20180915 has SQL Injection exploitable by an administrator...

CVE-2018-16436

Gxlcms 2.0 before bug fix 20180915 has SQL Injection exploitable by an administrator...

CVE-2018-16437

Gxlcms 2.0 before bug fix 20180915 has Directory Traversal exploitable by an administrator...

CVE-2018-16436

Gxlcms 2.0 before bug fix 20180915 has SQL Injection exploitable by an administrator...

CVE-2018-16437

Gxlcms 2.0 before bug fix 20180915 has Directory Traversal exploitable by an administrator...

CVE-2018-15177

In Gxlcms 2.0, a news/index.php?s=Admin-Admin-Insert CSRF attack can add an administrator account...

Cross site request forgery (csrf)

In Gxlcms 2.0, a news/index.php?s=Admin-Admin-Insert CSRF attack can add an administrator account...

CVE-2018-15177

In Gxlcms 2.0, a news/index.php?s=Admin-Admin-Insert CSRF attack can add an administrator account...

CVE-2018-15177

CVE-2018-15177 affects Gxlcms 2.0: a CSRF via news/index.php?s=Admin-Admin-Insert allows an attacker to add an administrator account. The CNVD entry confirms remote exploitation to add an admin; other sources describe the CSRF vulnerability. No remediation details are provided in the connected do...