| Package | Affected versions | Patched versions |
|---|---|---|
| phpfox | = 3.7.3= 3.7.4= 3.7.5 |
static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication via a request with a modified val[item_id] parameter for the publication.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free