Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 26
Reset filtersSunshine Photo Cart <= 3.6 - Unauthenticated Insecure Direct Object Reference
Sunshine Photo Cart <= 3.6.11 - Missing Authorization
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers <= 3.6.10.1 - Missing Authorization
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers <= 3.6.7 - Missing Authorization
Sunshine Photo Cart < 3.6.2 - Unauthenticated Information Exposure
Sunshine Photo Cart <= 3.5.6.2 - Missing Authorization
Sunshine Photo Cart <= 3.5.7.2 - Missing Authorization
Sunshine Photo Cart <= 3.5.7.1 - Missing Authorization
Sunshine Photo Cart <= 3.5.3 - Missing Authorization
Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation
Sunshine Photo Cart <= 3.4.10 - Unauthenticated PHP Object Injection
Sunshine Photo Cart <= 3.2.9 - Open Redirect
Sunshine Photo Cart <= 3.2.9 - Missing Authorization
Sunshine Photo Cart <= 3.2.8 - Missing Authorization
Sunshine Photo Cart <= 3.2.9 - Missing Authorization
Sunshine Photo Cart <= 3.2.5 - Reflected Cross-Site Scripting
Sunshine Photo Cart <= 3.2.1 - Missing Authorization
Sunshine Photo Cart: Free Client Photo Galleries for Photographers <= 3.1.1 - Unauthenticated PHP Object Injection
Sunshine Photo Cart <= 3.1.1 - Reflected Cross-Site Scripting
Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice
Sunshine Photo Cart <= 2.9.25 - Insecure Direct Object Reference to Order Manipulation
Sunshine Photo Cart <= 2.9.14 - Reflected Cross-Site Scripting
Sunshine Photo Cart <= 2.9.13 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.