OpenGnsys vulnerabilities
We track 3 vulnerabilities in OpenGnsys products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 12, 2024.
Latest OpenGnsys vulnerabilities
- 7.5 High severity
OpenGnsys: Exposure of Sensitive Information to an Unauthorized Actor
Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to view a php backup file (controlaccess.php-LAST) where database credentials are stored.
- 8.8 High severity
OpenGnsys: Unrestricted Upload of File with Dangerous Type
Unrestricted file upload vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to send a POST request to the endpoint '/opengnsys/images/M_Icons.php' modifying the file extension, due to lack of file extension veri
- 9.8 Critical severity
OpenGnsys: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection Vulnerability has been found on OpenGnsys product affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to inject malicious SQL code into login page to bypass it or even retrieve all the information stored in the database.