| Package | Affected versions | Patched versions |
|---|---|---|
| thickbox gallery | = 2 |
Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5 password hash via a direct request to conf/admins.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free