Skip to content
OpenAdvisories

Vendor

Glossword Team

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2013-10067 Public exploit

    Glossword 1.8.8 - 1.8.12 Arbitrary File Upload RCE

    Glossword versions 1.8.8 through 1.8.12 contain an authenticated arbitrary file upload vulnerability. When deployed as a standalone application, the administrative interface (gw_admin.php) allows users with administrator privileges to upload files to the gw_t…