gwm

Top products

The 5 most recently published vulnerabilities affecting gwm.

• CVE-2008-6300Galatolo WebManager 1.3a allows remote attackers to bypass authentication and gain administrative access by setting the (1) gwm_user and (2) gwm_pass cookies to admin. NOTE: the provenance of this...7.5Feb 26, 2009
• CVE-2008-6249SQL injection vulnerability in plugins/users/index.php in Galatolo WebManager 1.3a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.7.5Feb 23, 2009
• CVE-2008-6108Cross-site scripting (XSS) vulnerability in result.php in Galatolo WebManager (GWM) 1.0 allows remote attackers to inject arbitrary web script or HTML via the key parameter.4.3Feb 10, 2009
• CVE-2008-2700SQL injection vulnerability in view.php in Galatolo WebManager 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.7.5Jun 13, 2008
• CVE-2008-2699Multiple directory traversal vulnerabilities in Galatolo WebManager (GWM) 1.0 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in (1) the plugin...7.5Jun 13, 2008