| Package | Affected versions | Patched versions |
|---|---|---|
| pblang | = 4.0= 4.56_4.5_rc2= 4.6= 4.63 |
sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free