PatchTheCVE: sistemagpwebhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-15877: Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the passwordhttps://patchthecve.com/cve/CVE-2017-15877.htmlhttps://patchthecve.com/cve/CVE-2017-15877.htmlWed, 17 Jun 2026 01:08:25 +0000CRITICAL 9.8: Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user database.CVE-2017-15876: Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users to upload any type ofhttps://patchthecve.com/cve/CVE-2017-15876.htmlhttps://patchthecve.com/cve/CVE-2017-15876.htmlWed, 17 Jun 2026 01:08:25 +0000HIGH 7.2: Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users to upload any type of file, including a PHP shell.CVE-2017-15875: SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary https://patchthecve.com/cve/CVE-2017-15875.htmlhttps://patchthecve.com/cve/CVE-2017-15875.htmlWed, 17 Jun 2026 01:08:24 +0000CRITICAL 9.8: SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL commands via the "checkemail" parameter.