https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 14:55:15 +0000 https://vulnerability.circl.lu/vuln/bdu:2024-01962 bdu:2024-01962 https://vulnerability.circl.lu/vuln/bdu:2024-01962 https://vulnerability.circl.lu/vuln/fkie_cve-2024-22108 <p>An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at /opt/webapp/lib/PureApi/CCApi.class.php is vulnerable to an unauthenticated SQL injection via /ccapi.php that an attacker can abuse in order to change the Administrator password to a known value.</p> <p>An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at /opt/webapp/lib/PureApi/CCApi.class.php is vulnerable to an unauthenticated SQL injection via /ccapi.php that an attacker can abuse in order to change the Administrator password to a known value.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2024-22108 https://vulnerability.circl.lu/vuln/ghsa-qfhm-jrhg-gr45 <p>An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at /opt/webapp/lib/PureApi/CCApi.class.php is vulnerable to an unauthenticated SQL injection via /ccapi.php that an attacker can abuse in order to change the Administrator password to a known value.</p> <p>An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at /opt/webapp/lib/PureApi/CCApi.class.php is vulnerable to an unauthenticated SQL injection via /ccapi.php that an attacker can abuse in order to change the Administrator password to a known value.</p> https://vulnerability.circl.lu/vuln/ghsa-qfhm-jrhg-gr45 https://vulnerability.circl.lu/vuln/gsd-2024-22108 gsd-2024-22108 https://vulnerability.circl.lu/vuln/gsd-2024-22108