9.3
Critique
CVE-2024-5057 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Easy Digital Downloads 3.2 | premières → 3.2.12 | Pas de correctif indiqué |
| easy_digital_downloads 3.2 | premières → 3.2.12 | Pas de correctif indiqué |
Autres CVE de Easy Digital Downloads
Les 9 CVE de Easy Digital Downloads →
CVE-2023-40005
Missing Authorization vulnerability in Syed Balkhi Easy Digital Downloads easy-digital-downloads allows Exploiting…
5.3
Moyenne
CVE-2024-43162
Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control…
4.3
Moyenne
CVE-2024-32100
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Easy Digital Downloads.This issue affects…
5.3
Moyenne
CVE-2024-31113
Cross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads:…
4.3
Moyenne