| Package | Affected versions | Patched versions |
|---|---|---|
| computrols building automation software | ≤ 19.0.0 |
Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start_pulling&id= substring.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free