CVE-2024-50482

CVE-2024-50482 Woocommerce Product Design = 1.0.0 - 認証なし任意ファイルアップロード 説明: WordPress用WooCommerce Product Designプラグインは、バージョン1.0.0以前のすべてのバージョンにおいて、ファイルタイプの検証が欠如しているため、任意のファイルアップロードに対して脆弱です。これにより、認証されていない攻撃者が影響を受けるサイトのサーバーに任意のファイルをアップロードする可能性があり、リモートコード実行が可能になる可能性があります。 Published: 2024-10-25 00:00:00...

CVE-2024-50508

CVE-2024-50508 Woocommerce Product Design = 1.0.0 - 認証なしの任意ファイルダウンロード 説明 WordPress用のWoocommerce Product Designプラグインは、1.0.0を含むそれ以前のすべてのバージョンにおいて、ディレクトリトラバーサルに対して脆弱です。これにより、認証されていない攻撃者がサーバー上の任意のファイルの内容を読み取ることが可能になり、そのファイルには機密情報が含まれている可能性があります。 詳細 タイプ : プラグイン スラッグ : woo-product-design 影響を受けるバージョン :...

The vulnerability of Siemens NX software for product design, development, and production lies in the fact that operations are performed outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Siemens NX software for product design, development, and production is related to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2024-50509

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through = 1.0.0...

CVE-2024-50482

Unrestricted Upload of File with Dangerous Type vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Upload a Web Shell to a Web Server.This issue affects Woocommerce Product Design: from n/a through = 1.0.0...

CVE-2024-50508

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through = 1.0.0...

The vulnerability of the Woocommerce Product Design plugin of the WordPress content management system arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain access to read, modify, or delete data.

The vulnerability of the Woocommerce Product Design plugin in the WordPress content management system is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to gain access to read, modify, or delete data...

Exploit for CVE-2024-50509

CVE-2024-50509 Woocommerce Product Design = 1.0.0 - Unauthent...

Exploit for CVE-2024-50482

CVE-2024-50482 Woocommerce Product Design = 1.0.0 - Unauth...

CVE-2024-50509

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through = 1.0.0...

CVE-2024-50508

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through = 1.0.0...

CVE-2024-50508 WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Download vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through = 1.0.0...

CVE-2024-50508

CVE-2024-50508 affects the WordPress plugin “Woocommerce Product Design” (versions

CVE-2024-50508 WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Download vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through = 1.0.0...

CVE-2024-50509

CVE-2024-50509 affects the WordPress Woocommerce Product Design plugin (versions &lt;= 1.0.0). The root cause is improper limitation of a pathname to a restricted directory, enabling path traversal. Impact described in sources includes unauthenticated arbitrary file deletion (potential for remote...

CVE-2024-50509 WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through = 1.0.0...

CVE-2024-50509 WordPress Woocommerce Product Design plugin <= 1.0.0 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Chetan Khandla Woocommerce Product Design woo-product-design allows Path Traversal.This issue affects Woocommerce Product Design: from n/a through = 1.0.0...

WordPress plugin Woocommerce Product Design 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

WordPress plugin Woocommerce Product Design 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

PT-2024-34284 · Chetan Khandla · Woocommerce Product Design

Name of the Vulnerable Software and Affected Versions: Chetan Khandla Woocommerce Product Design versions 1.0.0 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This allows for Path...