Gestioip
1 CVEs across 2 Gestioip products. Browse Gestioip vulnerabilities, severities, and proof-of-concept exploits.
Gestioip products with known CVEs
Gestioip CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2013-10039 | | | 2025-07-31 | A command injection vulnerability exists in GestioIP 3.0 commit ac67be and earlier in ip_checkhost.cgi. Crafted input to the 'ip' parameter allows attackers to… |
CVE-2024-50861 | Medium | 6.1 | 2025-01-14 | The ip_mod_dns_key_form.cgi request in GestioIP v3.5.7 is vulnerable to Stored XSS. An attacker can inject malicious code into the "TSIG Key" field, which is s… |
CVE-2024-50859 | Medium | 4.8 | 2025-01-14 | The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly formatted file, the content may be reflected… |
CVE-2024-50858 | High | 8.8 | 2025-01-14 | Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF). An attacker can execute actions via the admin's browser by hosting a… |
CVE-2024-50857 | Medium | 4.8 | 2025-01-14 | The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It allows data exfiltration and enables CSRF attacks. The vulnerability r… |
CVE-2024-48760 | Critical | 9.8 | 2025-01-14 | An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function. The attacker can upload a malicious perlcmd.cgi fi… |