| Package | Affected versions | Patched versions |
|---|---|---|
| nukeviet/nukeviet | < 4.3.04 | 4.3.04 |
| nukeviet | < 4.3.04 | 4.3.04 |
includes/core/is_user.php in NukeViet before 4.3.04 deserializes the untrusted nvloginhash cookie (i.e., the code relies on PHP's serialization format when JSON can be used to eliminate the risk).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free