| Package | Affected versions | Patched versions |
|---|---|---|
| smanga | = 3.2.7 |
An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user (including the administrator) and fully takeover the account by manipulating POST parameters. The issue stems from insecure permission validation in check-power.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free