Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 1 329
Wyczyść filtryAppointment Hour Booking <= 1.3.72 - CSV Injection
Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form
Booking calendar, Appointment Booking System <= 3.2.1 - Unauthenticated Arbitrary File Upload
Salon booking system <= 7.9 - Reflected Cross-Site Scripting
Event Monster <= 1.2.0 - Authenticated (Administrator+) SQL Injection
Five Star Restaurant Reservations <= 2.4.11 - Missing Authorization to Stored Cross-Site Scripting
Appointment Hour Booking <= 1.3.71 - Missing Authorization
Appointment Booking Calendar <= 1.3.69 - Missing Authorization
Event Monster – Event Management, Tickets Booking, Upcoming Event <= 1.1.20 - Cross-Site Request Forgery
Booking Calendar – Event Calendar <= 1.0.2 - Missing Authorization
Booking Ultra Pro <= 1.1.6 - Cross-Site Request Forgery
Booking Ultra Pro <= 1.1.8 - Stored Cross-Site Scripting
Booking Ultra Pro <= 1.1.5 - Missing Authorization
Booking Calendar <= 9.2.1 - Cross-Site Request Forgery
WP Hotel Booking <= 2.0.0 - Missing Authorization to Settings Update
WPCafe – Food Menu, WooCommerce Food Ordering, Food Delivery, Pickup and Restaurant Reservation <= 2.1.4 - Cross-Site Scripting
WP Hotel Booking <= 1.10.5 - Cross-Site Request Forgery
Rezgo Online Booking <= 4.1.7 - Reflected Cross-Site-Scripting
Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC <= 1.1.15 - Arbitrary File Upload
Hotel Booking < 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Appointment Hour Booking <= 1.3.55 - Authenticated Stored Cross-Site Scripting
CRM WordPress Plugin – RepairBuddy <= 3.72 - SQL Injection
Opal Hotel Room Booking plugin <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.