| Package | Affected versions | Patched versions |
|---|---|---|
| news | ≤ 5.2 |
index.php in Vincent Leclercq News 5.2 allows remote attackers to obtain sensitive information, such as the installation path, via a mail[] parameter with invalid values.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free