| Package | Affected versions | Patched versions |
|---|---|---|
| phpslash | = 0.5.3.2= 0.6.1 |
Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating a block and specifying the target file as the source URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free