Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 94
Reset filtersSilverstripe CMS XSS Vulnerability
Silverstripe CMS information disclosure
SilverStripe Web Cache Poisoning through HTTPRequestBuilder
SilverStripe Folders migrated from 3.x may be unsafe to upload to
SilverStripe Denial of Service on flush and development URL tools
SilverStripe asset-admin Cross-site Scripting (XSS)
Silverstripe Flash Clipboard Reflected XSS
Silverstripe XSS Vulnerabilities
SilverStripe CSV Excel Macro Injection
Silverstripe CMS Open Redirect
SilverStripe vulnerable to Cross-site Scripting
Silverstripe Framework SQLi Vulnerability
FormField with square brackets in field name skips validation
Business Logic Errors in SilverStripe Framework
Broken access control on files
Reflected XSS in SilverStripe
SilverStripe Priviledge escalation through cache pollution
Lack of access control on upoaded files
Session fixation in change password form
Missing warning can lead to unauthenticated admin access in SilverStripe
SilverStripe Versioned Files module Unpublished files are exposed publicly
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.