Gtb Central Console vulnerabilities

2 known vulnerabilities in Gtb Central Console from Gttb. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Gtb Central Console: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-22108Feb 2, 2024Gttb

  An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at /opt/webapp/lib/PureApi/CCApi.class.php is vulnerable to an unauthenticated SQL injection via /ccapi.php that an attacker can abuse in order to change the Adminis

• 7.2 High severity

  Gtb Central Console: Improper Neutralization of Special Elements used in a Command

  CVE-2024-22107Feb 2, 2024GttbEPSS 2.53%

  An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method systemSettingsDnsDataAction at /opt/webapp/src/AppBundle/Controller/React/SystemSettingsController.php is vulnerable to command injection via the /old/react/v1/api/system/dns/data endp