| Package | Affected versions | Patched versions |
|---|---|---|
| live | = 2.0 |
Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free