| Package | Affected versions | Patched versions |
|---|---|---|
| nodez | = 4.6.1.1 |
Directory traversal vulnerability in Nodez 4.6.1.1 and earlier allows remote attackers to read or include arbitrary PHP files via a .. (dot dot) in the op parameter, as demonstrated by inserting malicious Email parameters into list.gtdat, then accessing list.gtdat using the op parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free