Gambio

10 CVEs across 3 Gambio products. Browse Gambio vulnerabilities, severities, and proof-of-concept exploits.

Gambio products with known CVEs

ProductCVEs
Gambio5
Gambio Gx4
Xt\1
Gambio CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-23763Critical9.82024-02-12SQL Injection vulnerability in Gambio through 4.9.2.0 allows attackers to run arbitrary SQL commands via crafted GET request using modifiers[attribute][] param…
CVE-2024-23762High7.82024-02-12Unrestricted File Upload vulnerability in Content Manager feature in Gambio 4.9.2.0 allows attackers to execute arbitrary code via upload of crafted PHP file.
CVE-2024-23761Critical9.82024-02-12Server Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via crafted smarty email template.
CVE-2024-23760Low2.72024-02-12Cleartext Storage of Sensitive Information in Gambio 4.9.2.0 allows attackers to obtain sensitive information via error-handler.log.json and legacy-error-handl…
CVE-2024-23759Critical9.82024-02-12Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBoo…
CVE-2020-10985Medium4.82020-07-28Gambio GX before 4.0.1.0 allows XSS in admin/coupon_admin.php.
CVE-2020-10984High8.82020-07-28Gambio GX before 4.0.1.0 allows admin/admin.php CSRF.
CVE-2020-10983Medium4.92020-07-28Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php.
CVE-2020-10982Medium4.92020-07-28Gambio GX before 4.0.1.0 allows SQL Injection in admin/gv_mail.php.
CVE-2010-49542011-10-09SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands via the products_i…