CVE-2023-32637

GBrowse (the Generic Model Organism Database project) is affected by CVE-2023-32637 due to unrestricted file uploads: the product accepts files of any format and stores them in a web‑accessible area, enabling arbitrary code execution on the server by anyone who can upload. The connected documents...

CVE-2008-3781

The CVE-2008-3781 entry concerns GMOD GBrowse prior to version 1.69, which is affected by a cross-site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents confirm the product and version range but ...