Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.068
Restablecer filtrosImproper neutralization of formula elements in yii-helpers
snipe-IT vulnerable to host header injection
Incorrect Permission Assignment for Critical Resource in ShopXO
SQL filter bypass leading to arbitrary write requests using SQL Manager [DEBATE RUNNING ABOUT SCORING FROM PS CORE]
Possible XSS injection through Validate::isCleanHTML method
Arbitrary file read via the backoffice Database Manager [DEBATE RUNNING ABOUT SCORING FROM PS CORE]
TYPO3 PHP remote file inclusion vulnerability
TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors
Smarty Does Not Consider Umask Values When Setting Permissions
Commerce extension for TYPO3 vulnerable to Cross-site Scripting
Accessibility Glossary (a21glossary) SQL injection vulnerability
TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure
TYPO3 Direct Mail Extension Vulnerable to Cross-Site Scripting (XSS)
Apache Solr Search for TYPO3 vulnerable to Cross-site Scripting
freeCap CAPTCHA extension for TYPO3 has vulnerability in the session handling feature
phpMyAdmin Cross-site Scripting In MySQL Table Name
TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential
Typo3 API Install Tool vulnerable to Cross-site Scripting
TYPO3 API function vulnerable to Cross-site Scripting
TYPO3 Backend Command Injection via Shell Metacharacters in Uploaded File Name
TYPO3 Backend vulnerable to Frame Hijacking
TYPO3 Backend vulnerable to Cross-site Scripting
TYPO3 Backend Discloses Encryption Key
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.