PRODUCT PROFILE

3dprint-lite

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

严重CVE-2021-44362024/02/05

3DPrint Lite < 1.9.1.5 - Arbitrary File Upload

The plugin does not have any authorisation and does not check the uploaded file in its p3dlite_handle_upload AJAX action , allowing unauthenticated users to upload arbitrary file to the web server. However, there is a .htaccess, preventing the file to be accessed on Web servers such as Apache.

3dprint-litePoC 已收录RCE

CVSS9.8EPSS 73.9%

中危2023/11/27

3D Print Lite < 1.9.1.6 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape some user input before outputting it back in attributes, leading to Reflected Cross-Site Scripting issues

3dprint-litePoC 已收录

CVSS—