CVE-2024-3749

概要

参考情報

• wpscan.com/vulnerability/d14bb16e-ce1d-4c31-8791-bc63174897c0 · Exploit

sp project & document manager のその他の脆弱性

• CVE-2024-37224中 6.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in smartypants SP Project & Document Manager.Th…
• CVE-2024-3748中 6.5The SP Project & Document Manager WordPress plugin through 4.71 is missing validation in its upload function, allowing a user to manipulate …
• CVE-2024-24868高 8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Mana…
• CVE-2023-36677高 8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Mana…
• CVE-2023-36530中 4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Smartypants SP Project & Document Manager plugin <= 4.67 versions.