Advisories · Technology
gm_alex User Access Manager.
Every CVE that names gm_alex User Access Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
User Access Manager <= 2.3.18 - Reflected Cross-Site Scripting via 'tab_group_section' Parameter
- gm_alex User Access Manager
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
User Access Manager <= 2.3.12 - Authenticated (Subscriber+) SQL Injection
- gm_alex User Access Manager
- SQL injection
- CVSS 7.5 High
User Access Manager <= 2.3.15 - Unauthenticated Arbitrary File Read via 'uamgetfile' Parameter
- gm_alex User Access Manager
- Path traversal