Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 23
Wyczyść filtrytagDiv Composer <= 5.4.5 - Reflected Cross-Site Scripting
tagDiv Composer <= 5.4.2 - Reflected Cross-Site Scripting
tagDiv Composer <= 5.4.4 - Unauthenticated Arbitrary Shortcode Execution
tagDiv Composer <= 5.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
tagDiv Composer <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
tagDiv Composer <= 5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
tagDiv Composer <= 5.4.1 - Unauthenticated Stored Cross-Site Scripting
tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data'
tagDiv Composer <= 5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
TagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object Instantiation
tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username'
tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
tagDiv Composer <= 5.0 - Reflected Cross-Site Scripting via envato_code[]
tagDiv Composer <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via button Shortcode
tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode
tagDiv Composer <= 4.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Meta
tagDiv Composer <= 4.1 - Unauthenticated Stored Cross-Site Scripting
tagDiv Composer <= 4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
tagDiv Composer < 4.4 - Cross-Site Request Forgery to Cross-Site Scripting
tagDiv Composer < 4.0 - Reflected Cross-Site Scripting via ‘td_video_url’
tagDiv Composer < 3.5 - Unauthorized Account Access and Privilege Escalation
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.