Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.445
Zingiri Tickets <= 3.0.3 - Sensitive Information Disclosure
Organizer <= 1.2.1 - Path Disclosure
Timely All-in-One Events Calendar < 1.6 - Cross-Site Scripting
WP Marketplace – Complete Shopping Cart / eCommerce Solution <= 1.2.1 - Arbitrary File Upload
Front-end Editor < 2.3 - Arbitrary File Upload
Uploadify Integration <= 0.9.7 - Reflected Cross-Site Scripting
TagGator Plugin < 1.33 - SQL Injection
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds < 2.0 - Arbitrary File Upload
Dean's FCKEditor <= 1.0.0 - Arbitrary File Upload
WordPress Integrator <= 1.32 - Cross-Site Scripting
Register Plus Redux <= 4.3 - Cross-Site Scripting
BuddyPress - 1.5-1.5.4 - SQL Injection
CMS Tree Page View < 0.8.9 - Cross-Site Scripting
MoneyMasters (All Versions) - Arbitrary File Upload
Mapplic Lite and Mapplic <= (Various Versions) - Server Side Request Forgery to Cross-Site Scirpting
IFrame Admin Pages <= 0.1 - Reflected Cross-Site Scripting
Kish Guest Posting <= 1.2 - Unauthenticated Arbitrary File Upload
IDB Ecommerce (wpStoreCart 5) < 2.5.30 - Arbitrary File Upload
Videopack (formerly Video Embed & Thumbnail Generator) <= 1.1 - Full Path Disclosure
Videopack (formerly Video Embed & Thumbnail Generator) < 2.0 - Remote Code Execution
s2Member® Framework (Membership, Member Level Roles, Access Capabilities, PayPal Members) < 111220 - Cross-Site Scripting
404like <= 1.0 - SQL Injection
Front End Upload < 0.5.4 - Arbitrary File Upload
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.