| Package | Affected versions | Patched versions |
|---|---|---|
| chatness | ≤ 2.5.3 |
admin/options.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier does not check for administrative credentials, which allows remote attackers to read and modify the classes/vars.php and classes/varstuff.php configuration files via direct requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free