| Package | Affected versions | Patched versions |
|---|---|---|
| motp | ≥ 3.5 |
Changing MOTP (Mobile One Time Password) system’s specific function parameter has insufficient validation for user input. A attacker in local area network can perform SQL injection attack to read, modify or delete backend database without authentication.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free