| Package | Affected versions | Patched versions |
|---|---|---|
| sbx | ≤ 1.2 |
index.php in Fusion SBX 1.2 and earlier does not properly use the extract function, which allows remote attackers to bypass authentication by setting the is_logged parameter or execute arbitrary code via the maxname2 parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free