Gambio 4.9.2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:gambio:gambio:4.9.2.0:*:*:*:*:*:*:*
part: a version: 4.9.2.0 update: *
| Vendor | Gambio (b7dbcd21-b885-5aa6-b8dc-f7b93b6458d8) |
|---|---|
| Product | Gambio (38bb671a-ff84-5b28-9c86-a355f95a0955) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-23763 |
vulnerable | 2026-06-08 06:29:40.390384 |
Details available
SQL Injection vulnerability in Gambio through 4.9.2.0 allows attackers to run arbitrary SQL commands via crafted GET request using modifiers[attribute][] parameter.
Published: 2024-02-12T00:00:00.000Z
Updated: 2025-05-07T21:02:18.442Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23762 |
vulnerable | 2026-06-08 06:29:40.389481 |
Details available
Unrestricted File Upload vulnerability in Content Manager feature in Gambio 4.9.2.0 allows attackers to execute arbitrary code via upload of crafted PHP file.
Published: 2024-02-12T00:00:00.000Z
Updated: 2025-03-18T20:02:54.713Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23761 |
vulnerable | 2026-06-08 06:29:40.388576 |
Details available
Server Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via crafted smarty email template.
Published: 2024-02-12T00:00:00.000Z
Updated: 2024-08-19T16:05:20.925Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23760 |
vulnerable | 2026-06-08 06:29:40.387757 |
Details available
Cleartext Storage of Sensitive Information in Gambio 4.9.2.0 allows attackers to obtain sensitive information via error-handler.log.json and legacy-error-handler.log.txt under the webroot.
Published: 2024-02-12T00:00:00.000Z
Updated: 2025-03-28T23:12:07.055Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23759 |
vulnerable | 2026-06-08 06:29:40.386873 |
Details available
Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function.
Published: 2024-02-12T00:00:00.000Z
Updated: 2025-05-07T20:59:58.075Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.