| Package | Affected versions | Patched versions |
|---|---|---|
| czarnews | = 1.12= 1.13= 1.14≤ 1.20 |
SQL injection vulnerability in cn_users.php in CzarNews 1.20 and earlier allows remote attackers to execute arbitrary SQL commands via a recook cookie.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free