CVE-2021-34619

The WooCommerce Stock Manager WordPress plugin is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Upload in versions up to, and including, 2.5.7 due to missing nonce and file validation in the /woocommerce-stock-manager/trunk/admin/views/import-export.php file...

CVE-2021-34619: Cross-Site Request Forgery (CSRF)

The WooCommerce Stock Manager WordPress plugin is vulnerable to Cross-Site Request Forgery leading to Arbitrary File Upload in versions up to, and including, 2.5.7 due to missing nonce and file validation in the /woocommerce-stock-manager/trunk/admin/views/import-export.php file...

PT-2019-2664

Name of the Vulnerable Software and Affected Versions U.motion Builder version 1.3.4 Description A SQL Injection issue exists in the software, which could cause unwanted code execution when an improper set of characters is entered. The vulnerability is related to incorrect handling of special...

PT-2018-1122

Name of the Vulnerable Software and Affected Versions Schneider Electric U.motion Builder software versions prior to v1.3.4 Description The issue exists in the processing of track import export.php, where the underlying SQLite database query is subject to SQL injection on the object id input...