Vice vulnerabilities
We track 4 vulnerabilities in Vice products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2024.
Latest Vice vulnerabilities
- 9.8 Critical severity
Webopac7: Improper Neutralization of Special Elements used in an SQL Command
Webopac from Grand Vice info has a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and delete database contents.
- 9.8 Critical severity
Webopac: Unrestricted Upload of File with Dangerous Type
Webopac from Grand Vice info does not properly validate uploaded file types, allowing unauthenticated remote attackers to upload and execute webshells, which could lead to arbitrary code execution on the server.
- 8.8 High severity
Webopac: Unrestricted Upload of File with Dangerous Type
Webopac from Grand Vice info does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload and execute webshells, which could lead to arbitrary code execution on the server.
- 9.8 Critical severity
Webopac: Improper Neutralization of Special Elements used in an SQL Command
Webopac from Grand Vice info has a SQL Injection vulnerability, allowing unauthenticated remote attacks to inject arbitrary SQL commands to read, modify, and delete database contents.