Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 57
Restablecer filtrosWelcart e-Commerce <= 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload
Welcart e-Commerce <= 2.9.4 - Cross-Site Request Forgery
Welcart e-Commerce <= 2.9.4 - Unauthenticated PHP Object Injection
Welcart e-Commerce <= 2.9.4 - Reflected Cross-Site Scripting
Welcart e-Commerce <= 2.8.21 - Authenticated(Editor+) Arbitrary File Upload
Welcart e-Commerce <= 2.8.21 - Authenticated(Editor+) SQL Injection
Welcart e-Commerce <= 2.8.21 - Authenticated(level_5+) SQL Injection via get_logs
Welcart e-Commerce <= 2.8.10 - Unauthenticated Stored Cross-Site Scripting
Welcart e-Commerce <= 2.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Welcart e-Commerce <= 2.8.4 - Authenticated (Subscriber+) Arbitrary File Read
Welcart e-Commerce <= 2.8.5 - Authenticated (Subscriber+) Information Disclosure and PHAR deserialization
Welcart e-Commerce 2.6.10-2.8.4 - Information Disclosure via Arbitrary File Read
Welcart e-Commerce <= 2.8.3 - Cross-Site Request Forgery
Welcart e-Commerce <= 2.8.3 - Missing Authorization
Welcart e-Commerce <= 2.8.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Welcart e-Commerce <= 2.8.3 - Cross-Site Request Forgery
Welcart e-Commerce 2.6.0-2.7.7 - Information Disclosure via Arbitrary File Read
Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure
Welcart e-Commerce < 2.2.8 - Missing Capabilities Check to Information Disclosure
Welcart e-Commerce <= 2.2.3 - Reflected Cross-Site Scripting
Welcart e-Commerce <= 2.1.0 - SQL Injection
Welcart e-Commerce <= 1.9.35 - PHP Object Injection
Welcart e-Commerce < 1.8.3 - Reflected Cross-Site Scripting
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.