All packages
GPWeb 8.4.61 vulnerabilities
3 known CVE vulnerabilities in GPWeb 8.4.61, translated and rated.
- CVE-2017-15876High
Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users to upload any type of file, including a PHP shell.
- CVE-2017-15877Critical
The CVE-2017-15877 vulnerability in the db.php file in GPWeb 8.4.61 has insecure permissions that allow remote attackers to view the password and user database.
- CVE-2017-15875Critical
CVE-2017-15875 is a SQL injection vulnerability in the Password Recovery feature in GPWeb 8.4.61. It allows remote attackers to execute arbitrary SQL commands via the 'checkemail' parameter.