Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: ONTRAPORT Component: Membership Simplified Clear all filters
TI-2017-14735 CVE-2017-1002010 · GHSA-qmjg-fj6g-53mc

SQL injection in ONTRAPORT Membership Simplified

Priority MEDIUM 46

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02277 Published 2017-09-14 Fixed in 1.58 CWE-89
TI-2017-14734 CVE-2017-1002009 · GHSA-92r5-7cvr-68j4

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in…

Priority MEDIUM 46

Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02277 Published 2017-09-14 No fix listed CWE-89