| Package | Affected versions | Patched versions |
|---|---|---|
| pentacle in-out board | = 6.03 |
Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) newsid parameter to newsdetailsview.asp and (2) password parameter to login.asp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free