) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- CPE Product Version: cpe:/a:goautodial:goadmin_ce:3.3
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2015-2845 |
The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via the $type portion of the PATH_INFO. Published: May 12, 2015; 3:59:20 PM -0400 |
V3.x:(not available) V2.0: 10.0 HIGH |
| CVE-2015-2844 |
The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arbitrary commands via the $action portion of the PATH_INFO. Published: May 12, 2015; 3:59:19 PM -0400 |
V3.x:(not available) V2.0: 10.0 HIGH |
| CVE-2015-2843 |
Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the (1) user_name or (2) user_pass parameter in go_login.php or the PATH_INFO to (3) go_login/validate_credentials/admin/ or (4) index.php/go_site/go_get_user_info/. Published: May 12, 2015; 3:59:19 PM -0400 |
V3.x:(not available) V2.0: 7.5 HIGH |
| CVE-2015-2842 |
Unrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files) upload functionality in GoAutoDial GoAdmin CE 3.x before 3.3-1421902800 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in sounds/. Published: May 12, 2015; 3:59:17 PM -0400 |
V3.x:(not available) V2.0: 10.0 HIGH |