| Package | Affected versions | Patched versions |
|---|---|---|
| comet webfile manager | ≤ 0.9.1 |
PHP remote file inclusion vulnerability in CheckUpload.php in Vincenzo Valvano Comet WebFileManager (CWFM) 0.9.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the Language parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free