| Package | Affected versions | Patched versions |
|---|---|---|
| linkscaffe | = 3.0 |
Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) offset and (2) limit parameters, (3) newdays parameter in a new action, and the (4) link_id parameter in a deadlink action. NOTE: this issue can also be used for path disclosure by a forced SQL error, or to modify PHP files using OUTFILE.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free