| Package | Affected versions | Patched versions |
|---|---|---|
| drake cms | = 0.2≤ 0.2.2.846≤ 0.2.2_alpha_rev.846≤ 0.3.2≤ 0.3.3≤ 0.3.4b≤ 0.3.5≤ 0.3.6≤ 0.3.7≤ 0.3.7_beta≤ 0.3.8_beta≤ 0.3.9≤ 0.4.0≤ 0.4.0b≤ 0.4.1≤ 0.4.10_rc6≤ 0.4.11 |
SQL injection vulnerability in the guestbook component (components/guestbook/guestbook.php) in Drake CMS 0.4.11 and earlier allows remote attackers to execute arbitrary SQL commands via the Via HTTP header (HTTP_VIA) to index.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free