| Package | Affected versions | Patched versions |
|---|---|---|
| geomedia webmap | < 16.6.2.66 | 16.6.2.66 |
MapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 (aka 16.6.2.66) allows blind SQL Injection via the Id (within sourceItems) parameter to the GetMap method.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free