Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 56
Restablecer filtrosbaserCMS Path Traversal Leads to Arbitrary File Write and RCE via Theme File API
baserCMS has OS command injection vulnerability in installer
baserCMS has a cross-site scripting vulnerability in blog posts
baserCMS has Mail Form Acceptance Bypass via Public API
baserCMS Update Functionality Vulnerable to OS Command Injection
baserCMS has an SQL injection vulnerability in its blog post functionality
baserCMS has OS Command Injection Leading to Remote Code Execution (RCE)
baserCMS has Unsafe File Upload Leading to Remote Code Execution (RCE)
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Edit Email Form Settings Feature
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts Feature
baserCMS has a Cross-site Scripting (XSS) Vulnerability in HTTP 400 Bad Request
baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts and Contents list Feature
baserCMS Cross-site Scripting vulnerability in Site search Feature
baserCMS OS command injection vulnerability in Installer
baserCMS Cross-site Scripting vulnerability in Content Management
baserCMS Code Injection Vulnerability in Mail Form Feature
baserCMS CSRF vulnerability in Content preview Feature
baserCMS Directory Traversal vulnerability in Form submission data management Feature
baserCMS Cross-site Scripting vulnerability in File upload Feature
baserCMS Cross-site Scripting Vulnerability in Favorites Feature
baserCMS allows any file to be uploaded
baserCMS File Uploader Remote Code Execution (RCE) vulnerability
baserCMS vulnerable to stored Cross-site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.