Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 88
Wyczyść filtrySalon booking system <= 10.30.3 - Cross-Site Request Forgery
Bookme <= 4.2 - Authenticated (Admin+) SQL Injection via 'filter[status]' Parameter
Course Booking System <= 6.1.5 - Missing Authorization to Unauthenticated Booking Data Export
Salon Booking System <= 10.22 - Missing Authorization to Unauthenticated AJAX Actions Execution
Booking System Trafft <= 1.0.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Salon booking system <= 10.16 - Cross-Site Request Forgery to Arbitrary Post/Page Deletion
Car Park Booking System for WordPress <= 2.6 - Missing Authorization
Course Booking System <= 6.1.2 - Reflected Cross-Site Scripting
TuriTop Booking System <= 1.0.11 - Authenticated (Subscriber+) PHP Object Injection
Salon booking system <= 10.29.6 - Missing Authorization
Course Booking System <= 6.1 - Missing Authorization
TuriTop Booking System <= 1.0.17 - Missing Authorization
Salon booking system <= 10.11 - Authenticated Privilege Escalation
Turisbook Booking System <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.4 - Authenticated (Subscriber+) SQL Injection
Course Booking System <= 6.0.6 - Unauthenticated SQL Injection
Booking System Trafft <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.7 - Missing Authorization
Pinpoint Booking System <= 2.9.9.5.1 - Authenticated (Subscriber+) SQL Injection
EzyOnlineBookings Online Booking System Widget <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Booking System <= 2.0.19.10 - Missing Authorization via wpbs_refresh_calendar_editor
Pinpoint Booking System <= 2.9.9.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Salon booking system <= 10.9 - Authenticated (Subscriber+) Insecure Direct Object Reference
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.