Vendor archive

dtracker_project CVEs

Beta · best-effort

4 CVEs tagged to vendor dtracker_project — 0 Critical, 4 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2017-1002007

Published Sep 14, 2017

Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_mail.php doesn't check that the user is authorized before injecting new contacts into the wp_contact table.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2017-1002006

Published Sep 14, 2017

Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_contact.php doesn't check that the user is authorized before injecting new contacts into the wp_contact tab…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2017-1002005

Published Sep 14, 2017

Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/delete.php user input isn't sanitized via the contact_id variable before adding it to the end of an SQL query.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2017-1002004

Published Sep 14, 2017

Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/download.php user input isn't sanitized via the id variable before adding it to the end of an SQL query.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1