CVE-2017-17097

CVE-2017-17097 affects gps-server.net GPS Tracking Software (self hosted). Connected documents confirm a password reset vulnerability in 2.x that allows unauthenticated password resets and sending a predictable, date-based password, enabling remote access. Additional details describe a broader se...

CVE-2017-17098

CVE-2017-17098 affects gps-server.net GPS Tracking Software (self hosted) up to version 3.0. The vulnerability is in the writeLog function in fn_common.php, where crafted input logged during admin log viewing can cause remote code execution by injecting PHP code (example: in a login request). Co...