home.social
Sign in Create account

#gambio — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #gambio, aggregated by home.social.

  1. Marcel SIneM(S)US @[email protected] ·

    Angreifer knacken #Gambio-Webshops – Updates verfügbar | Security heise.de/news/Updaten-Angriffe #Patchday #exploit #SQLinjection

    #gambio #patchday #exploit #sqlinjection
  2. usd AG @[email protected] ·

    Our #usdHeroLab professionals have uncovered a vulnerability in the online store software #Gambio during their #pentests.

    Our analysts discovered a vulnerability in the password reset functionality. Exploiting this vulnerability would enable an attacker to change the password for any account and take over, for example, the administrator account of the application.

    The vulnerability was reported to the vendor under the Responsible Disclosure Policy.

    👉 More details: herolab.usd.de/en/security-adv

    #usdherolab #gambio #pentests
  3. usd AG @[email protected] ·

    Our #usdHeroLab #Pentest professionals analyzed #Gambio during their pentests.
    1⃣Vulnerability Type: several vulnerabilities with partly high risk
    🚨Security Risk: Critical
    🧵👇 More Details

    🧐Gambio is a software designed for running online shops. It provides various features and tools to help businesses manage their inventory, process orders, and handle customer interactions.

    The identified vulnerabilities allowed unauthenticated attackers to execute code on the underlying system, because the application deserializes untrusted data. Other vulnerabilities allowed unauthenticated attackers to perform SQL injection attacks to extract data from the database. Also the application stores the passwords provided during the installation process in cleartext.

    The vulnerability was reported to the vendor under the Responsible Disclosure Policy. More information can be found here 🧑‍💻👩‍💻 👇
    herolab.usd.de/en/security-adv

    #usdherolab #pentest #gambio