| Package | Affected versions | Patched versions |
|---|---|---|
| clbox | = 1.01 |
PHP remote file inclusion vulnerability in signup.php in CLBOX 1.01 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: this issue has been disputed by a reliable third party, stating that header is defined through an include file before use
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free