Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 21
Reset filtersSimple File List <= 6.3.11 - Unauthenticated Arbitrary File Read
Simple File List <= 6.3.11 - Unauthenticated Stored Cross-Site Scripting
Simple File List <= 6.3.8 - Reflected Cross-Site Scripting
Simple File List <= 6.3.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Operations (Deletion / Move / Folder Creation / Download) via 'frontmanage' Shortcode Attribute
Simple File List <= 6.3.7 - Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter
Simple File List <= 6.3.7 - Missing Authorization to Unauthenticated File Modification via simplefilelist_edit_job AJAX Action
Simple File List <= 6.1.15 - Authenticated (Subscriber+) Arbitrary File Download
Simple File List <= 6.3.7 - Missing Authorization
Simple File List <= 6.1.14 - Unauthenticated Arbitrary File Download
Simple File List <= 6.1.11 - Reflected Cross-Site Scripting
Simple File List <= 6.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Simple File List <= 6.1.9 - Unauthenticated Arbitrary File Deletion
Simple File List <= 6.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Simple File List <= 4.4.12 - Cross-Site Request Forgery to Page Creation
Simple File List <= 4.4.11 - Reflected Cross-Site Scripting
Simple File List <= 4.4.11 - Reflected Cross-Site Scripting
Simple File List < 4.2.3 - Remote Code Execution
Simple File List <= 4.2.7 - Arbitrary File Deletion
Simple File List <= 3.2.7 - Arbitrary File Download
Simple File List <= 3.2.4 - Arbitrary File Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.