CVE-2017-15875

CRITICAL 9.8CVE-2017-15875 · Published 19/12/2017 · updated 17/06/2026

In short

CVE-2017-15875 is a CRITICAL (CVSS 9.8) vulnerability affecting gpweb (sistemagpweb).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gpweb sistemagpweb	`= 8.4.61`	No fix yet

Description

SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL commands via the "checkemail" parameter.

References

augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivel · Exploit

More vulnerabilities in gpweb

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free