Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 1 329
Wyczyść filtryFastBook <= 1.1 - Reflected Cross-Site Scripting
Simply Schedule Appointments <= 1.6.8.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
Hydra Booking <= 1.1.9 - Missing Authorization
WP Travel Engine <= 6.5.1 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Hydra Booking <= 1.1.10 - Authenticated (Subscriber+) SQL Injection
CozyStay < 1.7.1 - Unauthenticated Local File Inclusion
Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 - Unauthenticated Local File Inclusion
CozyStay < 1.7.1 - Unauthenticated PHP Object Injection
WpEvently <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Booking Ultra Pro <= 1.1.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
Hydra Booking <= 1.1.10 - Authenticated (Contributor+) SQL Injection
FastBook <= 1.1 - Cross-Site Request Forgery
WP Travel Engine <= 6.5.1 - Authenticated (Contributor+) Local File Inclusion
WP Time Slots Booking Form <= 1.2.30 - Cross-Site Request Forgery
BRW <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
BRW <= 1.8.6 - Authenticated (Contributor+) Local File Inclusion
Soho Hotel <= 4.2.5 - Reflected Cross-Site Scripting
Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking <= 1.3.21 - Insecure Direct Object Reference to Sensitive Information Exposure
ReDi Restaurant Reservation <= 24.1209 - Reflected Cross-Site Scripting
Bus Ticket Booking with Seat Reservation for WooCommerce <= 1.7 - Unauthenticated SQL Injection
Booking and Rental Manager <= 2.3.8 - Missing Authorization
Tourmaster <= 5.3.8 - Unauthenticated Local File Inclusion
Multiple Themes by bslthemes <= Various Version - Unauthenticated Local File Inclusion
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.