Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 24
Reset filtersSP Project & Document Manager <= 4.71 - Authenticated (Subscriber+) Directory Traversal
SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update
SP Project & Document Manager <= 4.69 - Missing Authorization
SP Project & Document Manager <= 4.71 - Insecure Direct Object Reference to Information Exposure
SP Project & Document Manager <= 4.71 - Insecure Direct Object Reference
SP Project & Document Manager <= 4.71 - Authenticated (Author+) SQL Injeciton
SP Project & Document Manager <= 4.70 - Missing Authorization Stored Cross-Site Scripting
SP Project & Document Manager <= 4.69 - Authenticated (Contributor+) SQL Injection via Shortcode
SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) SQL Injection
SP Project & Document Manager <= 4.67 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
SP Project & Document Manager <= 4.59 - Reflected Cross-Site Scripting
SP Project & Document Manager <= 4.59 - Reflected Cross-Site Scripting
SP Project & Document Manager <= 4.57 - Sensitive File Disclosure
SP Project & Document Manager <= 4.56 - Cross-Site Request Forgery and Cross-Site Scripting
SP Project & Document Manager <= 4.25 - Reflected Cross-Site Scripting
SP Project & Document Manager <= 4.23 - Subscriber+ Arbitrary File Upload
SP Project & Document Manager <= 4.21 - Authenticated Shell Upload
SP Projects & Document Manager <= 2.5.9.5 - Cross-Site Scripting
SP Projects & Document Manager <= 2.5.9.5 - SQL Injection
SP Projects & Document Manager <= 2.6.0.0 - Arbitrary File Upload
SP Project & Document Manager <= 2.5.9.5 - Cross-Site Request Forgery
SP Project & Document Manager < 2.4.4 - Multiple SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.