| Package | Affected versions | Patched versions |
|---|---|---|
| monox | ≤ 5.1.40.5152 |
MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free