ZONE.CI 全球网

WordPress DTracker插件内容注入漏洞（CNVD-2017-31143）CVE编号
CVE-2017-1002006利用情况
暂无补丁情况 N

WordPress membership-simplified-for-oap-members-only插件任意文件下载漏洞CVE编号
CVE-2017-10

WordPress DTracker插件内容注入漏洞（CNVD-2017-31142）CVE编号
CVE-2017-1002007利用情况
暂无补丁情况 N

Membership Simplified Plugin 1.58 on WordPress Update updateDB.php delete SQL注入C

Membership Simplified Plugin 1.58 on WordPress updateDB.php delete_media SQL注入CV

image-gallery-with-slideshow up to 1.5.1 on WordPress admin_setting.php Variable

image-gallery-with-slideshow 1.5.2 on WordPress galleries/images 跨站脚本攻击CVE编号
CV

image-gallery-with-slideshow 1.5.2 on WordPress admin_setting.php Parameter SQL注

image-gallery-with-slideshow 1.5.2 on WordPress admin_setting.php Parameter SQL注

flickr-picture-backup 0.7 on WordPress Permission flickr-picture-download.php 无限

image-gallery-with-slideshow 1.5.2 on WordPress admin_setting.php Parameter SQL注

gift-certificate-creator 1.0 on WordPress gc-list.php 跨站脚本攻击CVE编号
CVE-2017-1002

eventr Plugin 1.02.2 on WordPress edit.php Parameter SQL注入CVE编号
CVE-2017-100201

eventr Plugin 1.02.2 on WordPress edit.php Parameter SQL注入CVE编号
CVE-2017-100201

surveys Plugin up to 1.01.7 on WordPress questions.php SQL Query SQL注入CVE编号
CVE

surveys Plugin up to 1.01.7 on WordPress survey_form.php SQL Query SQL注入CVE编号
C

surveys Plugin up to 1.01.7 on WordPress individual_responses.php SQL Query SQL注

高危Kind Editor文件上传漏洞CVE编号
CVE-2017-1002024利用情况
EXP 已公开补丁情况 官方补丁披露时间 2017-09-15漏

Easy Team Manager up to 1.3.1 on WordPress easy_team_manager_desc_edit.php SQL注入

rk-responsive-contact-form up to 1.0 on WordPress rk_user_list.php SQL Query SQL

plugin add-edit-delete-listing-for-member-module 1.0 on WordPress SQL注入CVE编号
CV

Event Expresso Free up to 3.1.37.11.L on WordPress edit_event_category id SQL注入C

wordpress-gallery-transformation 1.0 on WordPress gallery.php jpic SQL注入CVE编号
C

中危Google Kubernetes信息泄露漏洞CVE编号
CVE-2017-1002100利用情况
暂无补丁情况 官方补丁披露时间 2017-09-15

低危python-fedora跨站请求伪造漏洞CVE编号
CVE-2017-1002150利用情况
暂无补丁情况 官方补丁披露时间 2017-09-15漏洞