CVE-2014-9129

Description

References

• packetstormsecurity.com/files/129357/WordPress-CM-Download-Manager-2.0.6-XSS-CSRF.html · Exploit
• securityfocus.com/archive/1/534132/100/0/threaded · Third Party Advisory
• securityfocus.com/bid/71418 · Third Party Advisory
• downloadsmanager.cminds.com/release-notes · Vendor Advisory

Weitere Schwachstellen in cm download manager

• CVE-2024-1962HOCH 8.8The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could allow attackers to make logged …
• CVE-2024-1232MITTEL 4.8The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged …
• CVE-2024-1231MITTEL 6.8The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged …
• CVE-2022-3076HOCH 7.2The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any…
• CVE-2020-24146HOCH 8.1Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized users to delete arbitr…