| Package | Affected versions | Patched versions |
|---|---|---|
| vaethink | = 1.0.1 |
An arbitrary file upload vulnerability in the avatar upload function of vaeThink v1.0.1 allows attackers to open a webshell via changing uploaded file suffixes to ".php".
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free