← Back

Web Module

web_module

Vendor: Gatship • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-12163
1Gatship
1Web Module
Jun 17, 2026
May 17, 2019
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
GAT-Ship Web Module through 1.30 allows remote attackers to obtain potentially sensitive information via {} in a ws/gatshipWs.asmx/SqlVersion request.
CVE-2019-11028
1Gatship
1Web Module
Jun 17, 2026
Apr 9, 2019
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
GAT-Ship Web Module before 1.40 suffers from a vulnerability allowing authenticated attackers to upload any file type to the server via the "Documents" area. This vulnerability is related to "uploadDocFile.aspx".