Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 20
Wyczyść filtryKali Forms <= 2.4.20 - Unauthenticated Remote Code Execution via 'thisPermalink' Field Parameter
Kali Forms <= 2.4.18 - Unauthenticated Stored Cross-Site Scripting
Kali Forms — Contact Form & Drag-and-Drop Builder <= 2.4.18 - Authenticated (Subscriber+) Arbitrary File Deletion
Kali Forms <= 2.4.18 - Unauthenticated Stored Cross-Site Scripting via 'digitalSignature' Field Value
Kali Forms <= 2.4.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'kaliforms_field_components' Parameter
Kali Forms <= 2.4.16 - Missing Authorization to Unauthenticated Media File Upload
Kali Forms <= 2.4.16 - Authenticated (Contributor+) Insecure Direct Object Reference to Post Metadata Disclosure
Kali Forms <= 2.4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_process
Kali Forms <= 2.4.8 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Form Data Exposure
Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization
Contact Form builder with drag & drop for WordPress – Kali Forms <= 2.3.41 - Missing Authorization to Arbitrary Plugin Deactivation
Contact Form builder with drag & drop - Kali Forms <= 2.3.36 - Insecure Direct Object Reference
Contact Form builder with drag & drop - Kali Forms <= 2.3.27 - Missing Authorization via Contact Form
Contact Form builder with drag & drop - Kali Forms <= 2.3.28 - Missing Authorization via get_log
Kali Forms <= 2.1.1 - Cross-Site Request Forgery
Kali Forms <= 2.1.1 - Missing Authorization to Settings Update
Kali Forms <= 2.1.1 - Unauthenticated Arbitrary Post Deletion
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.