| Package | Affected versions | Patched versions |
|---|---|---|
| ruvaroa | = 12.01= 6.01 |
Error messages in RuvarOA v6.01 and v12.01 were discovered to leak the physical path of the website (/WorkFlow/OfficeFileUpdate.aspx). This vulnerability can allow attackers to write files to the server or execute arbitrary commands via crafted SQL statements.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free