| Package | Affected versions | Patched versions |
|---|---|---|
| bonanza wealth management system | = 7.3.2 |
Bonanza Wealth Management System (BWM) 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free