| Package | Affected versions | Patched versions |
|---|---|---|
| phpkit | = 1.6.1 |
SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when the path parameter is set to faq/faq.php, and other unspecified vectors involving guestbook/print.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free