Read the docs

ONTRAPORT

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

ONTRAPORT records in CISA KEV

No ONTRAPORT vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Membership Simplified 2 records MEDIUM Pilotpress 1 record LOW

Records

2 records in Membership Simplified · all components

TI-2017-14735 CVE-2017-1002010 · GHSA-qmjg-fj6g-53mc

SQL injection in ONTRAPORT Membership Simplified

Priority MEDIUM 46

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02277 Published 2017-09-14 Fixed in 1.58 CWE-89
TI-2017-14734 CVE-2017-1002009 · GHSA-92r5-7cvr-68j4

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in…

Priority MEDIUM 46

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02277 Published 2017-09-14 No fix listed CWE-89
Open these records in search →