| Package | Affected versions | Patched versions |
|---|---|---|
| postfix admin | = 2.2.1.1= 2.3= 2.3.1= 2.3.2= 2.3.3= 2.3.4= 2.3.5≤ 2.3.6 |
SQL injection vulnerability in the gen_show_status function in functions.inc.php in Postfix Admin (aka postfixadmin) before 2.3.7 allows remote authenticated users to execute arbitrary SQL commands via a new alias.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free