| Package | Affected versions | Patched versions |
|---|---|---|
| cmg suite | = 8.4≤ 8.4 |
SQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated attacker to conduct an SQL injection attack due to insufficient input validation for the changepwd interface. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free