| Package | Affected versions | Patched versions |
|---|---|---|
| xmb | = 1.9.2= 1.9.3 |
post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free