Filtered by vendor Gttb Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-22108 1 Gttb 1 Gtb Central Console 2024-08-29 9.8 Critical
An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method setTermsHashAction at /opt/webapp/lib/PureApi/CCApi.class.php is vulnerable to an unauthenticated SQL injection via /ccapi.php that an attacker can abuse in order to change the Administrator password to a known value.
CVE-2024-22107 1 Gttb 1 Gtb Central Console 2024-08-01 7.2 High
An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method systemSettingsDnsDataAction at /opt/webapp/src/AppBundle/Controller/React/SystemSettingsController.php is vulnerable to command injection via the /old/react/v1/api/system/dns/data endpoint. An authenticated attacker can abuse it to inject an arbitrary command and compromise the platform.