| Package | Affected versions | Patched versions |
|---|---|---|
| gibbon | ≤ 26.0.00 |
Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the modules/System%20Admin/import_run.php&type=externalAssessment&step=4 URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free