Vendor archive

gonicus CVEs

Beta · best-effort

4 CVEs tagged to vendor gonicus — 2 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2019-11187

Published Aug 15, 2019

Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into any account with a username containing the case-insensitive substring…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2018-1000528

Published Jun 26, 2018

GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password form (html/password.php, #308) t…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2007-0313

Published Jan 18, 2007

Unspecified vulnerability in GONICUS System Administration (GOsa) before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via craf…

CVSS 9.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2003-1412

Published Dec 31, 2003

PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0 allows remote attackers to execute arbitrary PHP code via the plugin parameter to…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1