| Package | Affected versions | Patched versions |
|---|---|---|
| risearch | = 1.0.01 | |
| risearch pro | = 3.2.6 |
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free