| Package | Affected versions | Patched versions |
|---|---|---|
| 4site cms | = 2.0= 2.2≤ 2.6 |
SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free