| Package | Affected versions | Patched versions |
|---|---|---|
| vcard | = 2.8= 2.9 |
Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free