Approved changes feed: RSS · Atom

cpe:2.3:a:sistemagpweb:gpweb:8.4.61:*:*:*:*:*:*:*

part: a version: 8.4.61 update: *

VendorSistemagpweb (ee54fb6c-0e4f-5535-b310-aea34d6b044d)
ProductGpweb (f80d29b0-efba-5ea4-b847-29ef0b5e358c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/lavanco/gpweb purl2cpe 2026-06-01 10:12:34.248501

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-15877 vulnerable 2026-06-08 05:08:59.645329 Details available
Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user database.
Published: 2017-12-18T17:00:00.000Z
Updated: 2024-08-05T20:04:50.396Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15876 vulnerable 2026-06-08 05:08:59.645025 Details available
Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users to upload any type of file, including a PHP shell.
Published: 2017-12-18T17:00:00.000Z
Updated: 2024-08-05T20:04:50.401Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15875 vulnerable 2026-06-08 05:08:59.644628 Details available
SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL commands via the "checkemail" parameter.
Published: 2017-12-18T17:00:00.000Z
Updated: 2024-08-05T20:04:50.421Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.