Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 20
Reset filtersPimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter
Pimcore vulnerable to SQL injection via unsanitized filter value in Dependency Dao RLIKE clause
Pimcore's Admin Classic Bundle is Missing Function Level Authorization on "Predefined Properties" Listing
Pimcore's Admin Classic Bundle allows HTML Injection
Pimcore Admin Classic Bundle allows user enumeration
Pimcore includes vulnerable PHPOffice/PhpSpreadsheet
Pimcore vulnerable to disclosure of system and database information behind /admin firewall
Vulnerable embedded jQuery Version
Pimcore Host Header Injection in user invitation link
Pimcore Admin Classic Bundle permissions are not getting checked when working with tags
Host header injection in the password reset
SQL Injection in Admin download files as zip
Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls
Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()
pimcore/admin-ui-classic-bundle Full Path Disclosure via re-export document
Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews
pimcore/admin-ui-classic-bundle Unverified Password Change
pimcore/admin-ui-classic-bundle Cross-site Scripting vulnerability in Translations
Pimcore admin UI vulnerable to Cross-site Scripting in 2 factor authentication setup page
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.