| Package | Affected versions | Patched versions |
|---|---|---|
| toendacms | ≤ 0.6.1 |
toendaCMS before 0.6.2 stores user account and session data in the web root directory, which allows remote attackers to obtain sensitive information via a direct request to the appropriate XML file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free