| Package | Affected versions | Patched versions |
|---|---|---|
| sportsnet | = 4.0.1 |
SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to retrieve, update and delete all information in the database by sending a specially crafted SQL query: https://XXXXXXX.saludydesafio.com/app/ax/checkBlindFields/ , parameters idChallenge and idEmpresa.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free