Sharetronix

7 CVEs across 1 Sharetronix products. Browse Sharetronix vulnerabilities, severities, and proof-of-concept exploits.

Sharetronix products with known CVEs

ProductCVEs
Sharetronix7
Sharetronix CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2013-53562014-06-13Sharetronix 3.1.1.3, 3.1.1, and earlier does not properly restrict access to unspecified AJAX functionality, which allows remote attackers to bypass authentica…
CVE-2013-53532014-06-13Unrestricted file upload vulnerability in system/controllers/ajax/attachments.php in Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote attackers to execute…
CVE-2013-53522014-06-13Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote attackers to execute arbitrary PHP code via the (1) activities_text parameter to services/activities/set…
CVE-2014-34152014-05-29SQL injection vulnerability in Sharetronix before 3.4 allows remote authenticated users to execute arbitrary SQL commands via the invite_users[] parameter to t…
CVE-2014-34142014-05-29Cross-site request forgery (CSRF) vulnerability in Sharetronix before 3.4 allows remote attackers to hijack the authentication of administrators for requests t…
CVE-2013-53552013-12-09Multiple cross-site request forgery (CSRF) vulnerabilities in Sharetronix 3.1.1 allow remote attackers to hijack the authentication of administrators for reque…
CVE-2013-53542013-12-09Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) fb_user_id or (2) tw_user_id p…