High
CVE-2009-1264
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
High
CVE-2009-1149
phpMyAdmin HTTP Response Splitting Vulnerability
Medium
CVE-2009-0816
Typo3 Backend XSS Vulnerability
Medium
CVE-2009-0815
TYPO3 leaks a hash secret in an error message
High
CVE-2009-0258
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
High
CVE-2009-0256
Authentication library in TYPO3 vulnerable to session fixation
High
CVE-2008-4524
AdaptCMS SQL Injection vulnerability
Medium
CVE-2008-4104
Joomla! Open Redirect vulnerability
Medium
CVE-2008-3228
Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs
High
CVE-2008-3227
Joomla! Open Redirect vulnerability
Medium
CVE-2008-3226
Joomla! allows attackers to access cached pages
Medium
CVE-2008-3218
Drupal vulnerable to Cross-site Scripting
Medium
CVE-2008-3032
phpMyAdmin extension for TYPO3 has Cross-site Scripting vulnerability
Medium
CVE-2008-2717
TYPO3 Unrestricted File Upload vulnerability
Medium
CVE-2008-1502
Moodle vulnerable to Cross-site scripting
Medium
CVE-2007-4190
Joomla! vulnerable to CRLF injection
Medium
CVE-2007-3498
HTML Purifier Cross-site Scripting vulnerability
Medium
CVE-2006-5031
CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files
Medium
CVE-2006-4936
Moodle does not properly validate module instance id
Medium
CVE-2006-4067
Cross-site scripting (XSS) vulnerability in CakePHP
Medium
CVE-2006-3360
phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence
Critical
CVE-2006-0931
PEAR::Archive_Tar Directory Traversal vulnerability
High
CVE-2006-0868
PEAR::Auth potential authentication bypass vulnerability
High
CVE-2005-4875
TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.