| Package | Affected versions | Patched versions |
|---|---|---|
| df msanalysis | = 1.0.1 |
SQL injection vulnerability in mstrack.php in MusOX DF MSAnalysis (DFMSA), as used in some environments that use CPG-Nuke Dragonfly CMS, allows remote attackers to trigger path disclosure from a SQL syntax error, and possibly execute arbitrary SQL commands, via certain query data, probably involving the profile name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free