| Package | Affected versions | Patched versions |
|---|---|---|
| xeobook | = 0.93 |
Multiple SQL injection vulnerabilities in sign.php in Xeobook 0.93 allow remote attackers to execute arbitrary SQL commands via (1) the User-Agent HTTP header, or the (2) gb_entry_text, (3) gb_location, (4) gb_fullname, or (5) gb_sex parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free