| Package | Affected versions | Patched versions |
|---|---|---|
| eva-web | ≤ 2.1.2 |
An unspecified script in EVA-Web 2.1.2 and earlier, probably index.php, allows remote attackers to obtain the full path of the web server via invalid (1) perso or (2) aide parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free