| Package | Affected versions | Patched versions |
|---|---|---|
| mediacast | ≤ 8 |
MediaCAST 8 and earlier allows remote attackers to have an unspecified impact via a (1) CP_RIGHTSOURCE or (2) bdclient_Inventive cookie to the default URI under inventivex/managetraining/, related to an "XML injection" issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free