Vulnerabilities (CVE)

Filtered by vendor Gatship Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-12163 1 Gatship 1 Web Module 2024-02-28 5.0 MEDIUM 5.3 MEDIUM
GAT-Ship Web Module through 1.30 allows remote attackers to obtain potentially sensitive information via {} in a ws/gatshipWs.asmx/SqlVersion request.
CVE-2019-11028 1 Gatship 1 Web Module 2024-02-28 6.5 MEDIUM 8.8 HIGH
GAT-Ship Web Module before 1.40 suffers from a vulnerability allowing authenticated attackers to upload any file type to the server via the "Documents" area. This vulnerability is related to "uploadDocFile.aspx".