| Package | Affected versions | Patched versions |
|---|---|---|
| webgui | = 7.0= 7.0.1= 7.0.2= 7.0.3= 7.0.4= 7.0.5= 7.0.6= 7.0.7= 7.0.8= 7.0.9= 7.1= 7.1.1= 7.1.2= 7.1.3= 7.2= 7.2.1= 7.2.2= 7.2.3= 7.3= 7.3.1= 7.3.10= 7.3.11= 7.3.12= 7.3.13= 7.3.14= 7.3.15= 7.3.16= 7.3.17= 7.3.18= 7.3.19= 7.3.2= 7.3.20= 7.3.21= 7.3.3= 7.3.4= 7.3.5= 7.3.6= 7.3.7= 7.3.8= 7.3.9= 7.4.1= 7.4.10= 7.4.11= 7.4.12= 7.4.13= 7.4.14= 7.4.15= 7.4.16= 7.4.17= 7.4.18= 7.4.19= 7.4.2= 7.4.20= 7.4.21= 7.4.22= 7.4.23= 7.4.25= 7.4.26= 7.4.3= 7.4.4= 7.4.5= 7.4.6= 7.4.7= 7.4.8= 7.4.9≤ 7.3.22≤ 7.5≤ 7.5.1≤ 7.5.10≤ 7.5.11≤ 7.5.13≤ 7.5.14≤ 7.5.15≤ 7.5.16≤ 7.5.17≤ 7.5.18≤ 7.5.19≤ 7.5.2≤ 7.5.20≤ 7.5.21≤ 7.5.22≤ 7.5.23≤ 7.5.24≤ 7.5.3≤ 7.5.4≤ 7.5.5≤ 7.5.6≤ 7.5.7≤ 7.5.8≤ 7.5.9 |
The loadModule function in lib/WebGUI/Asset.pm in WebGUI before 7.5.30 (stable) allows remote attackers to execute arbitrary code by uploading a Perl module and accessing it via a crafted URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free