Gambio

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 11
    Known Exploited: 0
    4
    Critical Level Threats
    3
    High Level Threats
    3
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-34408

    An issue was discovered in Gambio 4.9.2.0 (patched in 2024-02 v1.0.0 for GX4 v4.0.0.0 to v4.9.2.0). The password reset function can be bypassed to set arbitrary passwords for arbitrary accounts if the ID is known.

    Last Modified: May 06, 2026
    Published: May 05, 2026

    CVE-2024-23761

    Server Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via crafted smarty email template.

    Last Modified: Nov 21, 2024
    Published: Feb 12, 2024

    CVE-2024-23760

    Cleartext Storage of Sensitive Information in Gambio 4.9.2.0 allows attackers to obtain sensitive information via error-handler.log.json and legacy-error-handler.log.txt under the webroot.

    Last Modified: Mar 28, 2025
    Published: Feb 12, 2024

    CVE-2024-23759

    Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function.

    Last Modified: May 07, 2025
    Published: Feb 12, 2024

    CVE-2024-23762

    Unrestricted File Upload vulnerability in Content Manager feature in Gambio 4.9.2.0 allows attackers to execute arbitrary code via upload of crafted PHP file.

    Last Modified: Mar 18, 2025
    Published: Feb 12, 2024
    Items Per Page
    Gambio Vulnerabilities & Security CVEs | CVE-DB