| Package | Affected versions | Patched versions |
|---|---|---|
| modlogan | = 0.5= 0.5.6= 0.5.7= 0.6= 0.7.11 |
The processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in a log file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free