| Package | Affected versions | Patched versions |
|---|---|---|
| nola | = 1.1.1= 1.1.2 |
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free