| Package | Affected versions | Patched versions |
|---|---|---|
| allmanage | = 2.6 |
The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free