| Package | Affected versions | Patched versions |
|---|---|---|
| sweetrice | = 0.2.0= 0.2.1= 0.3.0= 0.3.1= 0.4.0= 0.4.1= 0.4.2= 0.4.4= 0.5.0= 0.5.1= 0.5.2= 0.5.3≤ 0.5.4 |
Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to execute arbitrary PHP code via a URL in the root_dir parameter to (1) _plugin/subscriber/inc/post.php and (2) as/lib/news_modify.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free