8.3
Élevée
CVE-2023-36677 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Manager allows SQL Injection.This issue affects SP Project & Document Manager: from n/a through 4.67.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SP Project & Document Manager 4.67 | premières → 4.67 | Pas de correctif indiqué |
| sp_project_\&_document_manager 4.67 | premières → 4.67 | Pas de correctif indiqué |
Autres CVE de SP Project & Document Manager
Les 11 CVE de SP Project & Document Manager →
CVE-2026-10737
The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing…
7.5
Élevée
CVE-2024-31118
Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly…
6.5
Moyenne
CVE-2024-37224
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in smartypants SP Project &…
7.5
Élevée
CVE-2024-1693
The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a…
4.3
Moyenne