Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: ITFlux Clear all filters
TI-2017-14732 CVE-2017-1002007 · GHSA-3rj6-q89f-pwv2

Missing authorization in ITFlux DTracker

Priority LOW 39

Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_mail.php doesn't check that the user is authorized before injecting new contacts into the wp_contact table.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03232 Published 2017-09-14 Fixed in 1.5 CWE-862
TI-2017-14731 CVE-2017-1002006 · GHSA-95hr-5vrw-gpfq

Missing authorization in ITFlux DTracker

Priority LOW 39

Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_contact.php doesn't check that the user is authorized before injecting new contacts into the wp_contact table.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03232 Published 2017-09-14 Fixed in 1.5 CWE-862
TI-2017-14730 CVE-2017-1002005 · GHSA-696f-448p-mghh

SQL injection in ITFlux DTracker

Priority LOW 39

Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/delete.php user input isn't sanitized via the contact_id variable before adding it to the end of an SQL query.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03189 Published 2017-09-14 Fixed in 1.5 CWE-89
TI-2017-14729 CVE-2017-1002004 · GHSA-w44q-682m-pcjp

SQL injection in ITFlux DTracker

Priority LOW 39

Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/download.php user input isn't sanitized via the id variable before adding it to the end of an SQL query.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03409 Published 2017-09-14 Fixed in 1.5 CWE-89