8.5
Élevée
CVE-2026-24367 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Traveler traveler allows Blind SQL Injection.This issue affects Traveler: from n/a through < 3.2.8.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Traveler 3.2 | premières → 3.2.8 | Pas de correctif indiqué |
Autres CVE de Traveler
Les 15 CVE de Traveler →
CVE-2026-93947
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme…
9.3
Critique
CVE-2026-25449
Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler allows Object Injection.This issue…
9.8
Critique
CVE-2025-67917
Missing Authorization vulnerability in shinetheme Traveler traveler allows Exploiting Incorrectly Configured Access…
6.5
Moyenne
CVE-2025-64373
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
8.1
Élevée