| Package | Affected versions | Patched versions |
|---|---|---|
| php recommend | ≤ 1.3 |
admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote attackers to gain administrative privileges via modified form_admin_user and form_admin_pass parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free