| Package | Affected versions | Patched versions |
|---|---|---|
| selectsurvey.net | = 4.125.000≤ 4.125.001 |
Multiple SQL injection vulnerabilities in ClassApps SelectSurvey.NET before 4.125.002 allow (1) remote attackers to execute arbitrary SQL commands via the SurveyID parameter to survey/ReviewReadOnlySurvey.aspx or (2) remote authenticated users to execute arbitrary SQL commands via the SurveyID parameter to survey/UploadImagePopupToDb.aspx.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free