Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-8330

Gether Technology 6SHR System - Unrestricted File Upload

6SHR system from Gether Technology does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload web shell scripts and use them to execute arbitrary system commands on the server.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
6shr System Project Gethertechnology
Products
6shr System 6shr
CVE-2024-8329

Gether Technology 6SHR System - SQL Injection

6SHR system from Gether Technology does not properly validate the specific page parameter, allowing remote attackers with regular privilege to inject SQL command to read, modify, and delete database contents.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
6shr System Project Gethertechnology
Products
6shr System 6shr