Critical severity9.8NVD Advisory· Published Dec 19, 2017· Updated Jun 17, 2026

CVE-2017-15875

Description

SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL commands via the "checkemail" parameter.

Affected products

GPWeb/GPWeb2 versions
cpe:2.3:a:sistemagpweb:gpweb:8.4.61:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sistemagpweb:gpweb:8.4.61:*:*:*:*:*:*:*
- (no CPE)range: =8.4.61

Patches

Vulnerability mechanics

References

www.augustopereira.com.br/blog/seguranca-gpweb-8-4-61-multiplas-falhas-sqli-manipulacao-de-privilegios-uploads-sem-restricoes-exposicao-de-informacao-sensivelnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000