| Package | Affected versions | Patched versions |
|---|---|---|
| interchange | = 4.8.1= 4.8.2= 4.8.3= 4.8.4= 4.8.5= 4.8.6= 4.8.7= 4.8.8= 4.8.9= 5.0 |
Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free