| Package | Affected versions | Patched versions |
|---|---|---|
| mashzone nextgen | ≤ 10.7 |
MashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin console, to upload a new JDBC driver that can execute arbitrary commands on the underlying host. This occurs in com.idsscheer.ppmmashup.business.jdbc.DriverUploadController.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free