| Package | Affected versions | Patched versions |
|---|---|---|
| nibbleblog | = 4.0.5 |
Nibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter and then making a content/private/shadow.php request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free