Lucene search
+L

5 matches found

Positive Technologies
Positive Technologies
•added 2024/04/10 12:00 a.m.•5 views

PT-2024-23933

Name of the Vulnerable Software and Affected Versions Media Library Folders versions through 8.1.8 Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This vulnerability affects the Max Foundry Media...

6.5CVSS5.8AI score0.00661EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/10 12:00 a.m.•9 views

CVE-2024-31287: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Max Foundry Media Library Folders.This issue affects Media Library Folders: from n/a through 8.1.8...

6.5CVSS5.8AI score0.00661EPSS
SaveExploits0References2
CVE
CVE
•added 2024/03/29 1:39 p.m.•107 views

CVE-2024-30486

CVE-2024-30486 is an authenticated SQL injection in the WordPress plugin Media Library Folders (Media Library Folders: 8.1.7 and earlier). The issue arises from improper neutralization of input in SQL commands, enabling an attacker with Author+ or higher permissions to manipulate queries. The vul...

8.8CVSS8.9AI score0.00577EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/29 12:00 a.m.•4 views

CVE-2024-30486: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Max Foundry Media Library Folders.This issue affects Media Library Folders: from n/a through 8.1.7...

8.8CVSS5.8AI score0.00577EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/29 12:00 a.m.•5 views

PT-2024-23412

Name of the Vulnerable Software and Affected Versions Max Foundry Media Library Folders versions through 8.1.7 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by...

8.8CVSS5.8AI score0.00577EPSS
SaveExploits0References6
Rows per page
Query Builder