Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 19
Reset filtersBackup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameter
BackupBliss – Backup & Migration with Free Cloud Storage <= 2.1.1 - Unauthenticated Information Exposure
Backup Migration <= 2.0.0 - Missing Authorization to Unauthenticated Backup Upload to Offline Storage
Backup Migration <= 1.4.9 - Information Exposure to Unauthenticated Back-up Download
Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'
Backup Migration <= 1.4.3 - Information Exposure via Log Files
Inisev Analyst Module <= Various Versions - Missing Authorization
Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url
Backup Migration 1.0.8 - 1.3.9 - Remote File Inclusion via content-dir
Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
Backup Migration <= 1.3.5 - Unauthenticated Sensitive Information Exposure
Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure
Backup Migration <= 1.2.9 - Cross-Site Request Forgery
Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function
Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function
Backup Migration <= 1.2.8 - Sensitive Information Exposure
Backup Migration <= 1.1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.