| Package | Affected versions | Patched versions |
|---|---|---|
| webtareas | ≤ 2.4 |
webTareas version 2.4 and earlier allows an unauthenticated user to perform Time and Boolean-based blind SQL Injection on the endpoint /includes/library.php, via the sor_cible, sor_champs, and sor_ordre HTTP POST parameters. This allows an attacker to access all the data in the database and obtain access to the webTareas application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free