Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 1 329
Wyczyść filtryVikBooking Hotel Booking Engine & PMS <= 1.5.7 - Admin+ Stored Cross-Site Scripting
VikBooking Hotel Booking Engine & PMS <= 1.5.8 - Arbitrary File Upload
VikBooking Hotel Booking Engine & PMS <= 1.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
VikBooking Hotel Booking Engine & PMS <= 1.5.3 - Sensitive Information Exposure
VikBooking Hotel Booking Engine & PMS <= 1.5.3 - Arbitrary File Upload
Booking Calendar <= 9.1 - PHP Object Injection via Shortcode
Webba Booking <= 4.2.21 - Authenticated (Admin+) Stored Cross-Site Scripting
BookingPress – Appointments Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.13 - SQL Injection
Advanced Booking Calendar <= 1.7.0 - Authenticated SQL Injection
Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Information Disclosure
Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Data Disclosure
Advanced Booking Calendar <= 1.7.0 - Reflected Cross-Site Scripting
Appointment and Event Booking Calendar for WordPress – Amelia <= 1.0.47 - Information Disclosure and SMS Spam
Appointment and Event Booking Calendar for WordPress – Amelia < 1.0.49 - Arbitrary Booking Update and Sensitive Data Exposure
Booking Package <= 1.5.28 - Unauthenticated Sensitive Data Disclosure
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Amelia <= 1.0.46 - Stored Cross Site Scripting via lastName
Appointment and Event Booking Calendar for WordPress - Amelia < 1.0.47 - Arbitrary Booking Update and Sensitive Data Exposure
BookingPress < 1.0.11 - SQL Injection
Advanced Booking Calendar <= 1.6.9 - Unauthenticated SQL Injection
Appointment and Event Booking Calendar - Amelia < 1.0.47 - Arbitrary File Upload
Amelia <= 1.0.46 - Reflected Cross-Site Scripting
Amelia <= 1.0.46 - Cross-Site Request Forgery
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.