| Package | Affected versions | Patched versions |
|---|---|---|
| simple cms php | = 2.1 |
Simple CMS 2.1 contains a remote SQL injection vulnerability that allows privileged attackers to inject unfiltered SQL commands in the users module. Attackers can exploit unvalidated input parameters in the admin.php file to compromise the database management system and web application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free