Gambio vulnerabilities
We track 3 vulnerabilities in Gambio products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 12, 2024.
3vulnerabilities
2critical
1high
0exploited
9.1average CVSS score
Latest Gambio vulnerabilities
- 9.8 Critical severity
Gambio: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Gambio through 4.9.2.0 allows attackers to run arbitrary SQL commands via crafted GET request using modifiers[attribute][] parameter.
- 7.8 High severity
Gambio: Unrestricted Upload of File with Dangerous Type
Unrestricted File Upload vulnerability in Content Manager feature in Gambio 4.9.2.0 allows attackers to execute arbitrary code via upload of crafted PHP file.
- 9.8 Critical severity
Gambio: Unrestricted Upload of File with Dangerous Type
Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function.