PRODUCT PROFILE

web_directory_free

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

严重CVE-2024-35522024/06/13

Web Directory Free < 1.7.0 - SQL Injection

The plugin does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based.

web_directory_freePoC 已收录RCE

CVSS9.8EPSS 93.2%

严重CVE-2024-36732024/05/23

Web Directory Free < 1.7.3 - Local File Inclusion

The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an include(), which could lead to Local File Inclusion issues.

web_directory_freePoC 已收录

CVSS9.1EPSS 82.6%