Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 28
Wyczyść filtryBookit <= 2.6.0.4 - Missing Authorization
Bookit — Booking & Appointment Calendar < 2.6.0.1 - Unauthenticated Information Exposure
Bookit — Booking & Appointment Calendar <= 2.6.0.3 - Missing Authorization
Bookit — Booking & Appointment Calendar <= 2.5.1 - Missing Authorization
WPBookit Pro <= 1.6.18 - Authenticated (Subscriber+) Privilege Escalation
WPBookit Pro <= 1.6.18 - Authenticated (Subscriber+) Arbitrary File Upload
WPBookit <= 1.0.8 - Unauthenticated Stored Cross-Site Scripting via 'wpb_user_name' and 'wpb_user_email' Parameters
WPBookit <= 1.0.8 - Missing Authorization to Unauthenticated Sensitive Customer Data Exposure
WPBookit Pro <= 1.6.18 - Missing Authorization
WPBookit <= 1.0.7 - Cross-Site Request Forgery to Customer Deletion
WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting
Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Settings Update
Booking Calendar | Appointment Booking | Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Stripe Connection
WPBookit <= 1.0.6 - Unauthenticated Arbitrary File Upload via image_upload_handle Function
WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload
WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload
WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update
WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover
WPBookit <= 1.0.7 - Missing Authorization
WPBookit <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload
WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change
WPBookit <= 1.6.0 - Unauthenticated SQL Injection
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.