| Package | Affected versions | Patched versions |
|---|---|---|
| itop | ≤ 2.4.1 |
Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php contains a function called TestConfig() that calls the vulnerable function eval().
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free