Dtracker Project - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2017-09-14.

Products

• Dtracker - 4 CVEs

Newest CVEs of Dtracker Project

• CVE-2017-1002006 - CVSS 7.5 (high), 2017-09-14: Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_contact.php doesn't check that the user is authorized before injecting new contacts…
• CVE-2017-1002005 - CVSS 7.5 (high), 2017-09-14: Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/delete.php user input isn't sanitized via the contact_id variable before adding it to the…
• CVE-2017-1002004 - CVSS 7.5 (high), 2017-09-14: Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/download.php user input isn't sanitized via the id variable before adding it to the end of…
• CVE-2017-1002007 - CVSS 7.5 (high), 2017-09-14: Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_mail.php doesn't check that the user is authorized before injecting new contacts into…