| Package | Affected versions | Patched versions |
|---|---|---|
| nukesentinel | ≤ 2.5.06 |
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, which allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, due to an incomplete patch for CVE-2007-1172.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free