| Package | Affected versions | Patched versions |
|---|---|---|
| pear/auth | ≥ 1.3.0r1, < 1.3.0r4< 1.2.4 | 1.3.0r41.2.4 |
| xml rpc | = 1.0.2= 1.0.3= 1.0.4= 1.1.0= 1.2.0= 1.2.0rc1= 1.2.0rc2= 1.2.0rc3= 1.2.0rc4= 1.2.0rc5= 1.2.0rc6= 1.2.0rc7= 1.2.1= 1.2.2= 1.3.0rc1= 1.3.0rc2= 1.3.0rc3 |
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free