| Package | Affected versions | Patched versions |
|---|---|---|
| constructr-cms | = 3.00.0= 3.00.1= 3.00.2= 3.01.0= 3.01.1= 3.01.2= 3.01.3= 3.01.4= 3.01.5= 3.01.6= 3.01.7= 3.01.8= 3.01.9= 3.02.0= 3.02.1= 3.02.2= 3.02.3= 3.02.4≤ 3.02.5 |
SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the show_page parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free