Read the docs

ITFlux

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

ITFlux records in CISA KEV

No ITFlux vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Dtracker 4 records LOW

Records

4 records in Dtracker · all components

TI-2017-14732 CVE-2017-1002007 · GHSA-3rj6-q89f-pwv2

Missing authorization in ITFlux DTracker

Priority LOW 39

Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_mail.php doesn't check that the user is authorized before injecting new contacts into the wp_contact table.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03232 Published 2017-09-14 Fixed in 1.5 CWE-862
TI-2017-14731 CVE-2017-1002006 · GHSA-95hr-5vrw-gpfq

Missing authorization in ITFlux DTracker

Priority LOW 39

Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_contact.php doesn't check that the user is authorized before injecting new contacts into the wp_contact table.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03232 Published 2017-09-14 Fixed in 1.5 CWE-862
TI-2017-14730 CVE-2017-1002005 · GHSA-696f-448p-mghh

SQL injection in ITFlux DTracker

Priority LOW 39

Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/delete.php user input isn't sanitized via the contact_id variable before adding it to the end of an SQL query.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03189 Published 2017-09-14 Fixed in 1.5 CWE-89
TI-2017-14729 CVE-2017-1002004 · GHSA-w44q-682m-pcjp

SQL injection in ITFlux DTracker

Priority LOW 39

Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/download.php user input isn't sanitized via the id variable before adding it to the end of an SQL query.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03409 Published 2017-09-14 Fixed in 1.5 CWE-89
Open these records in search →