| Package | Affected versions | Patched versions |
|---|---|---|
| sahi pro | = 8.0.0 |
_s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one to run ".sah" scripts via Sahi Launcher. Also, one can create a new script with an editor. It is possible to execute commands on the server using the _execute() function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free