| Package | Affected versions | Patched versions |
|---|---|---|
| iotransfer | = 4.3.1.1561 |
In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-system (with admin privileges) on the victim's endpoint, which can result in data theft and remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free