| Package | Affected versions | Patched versions |
|---|---|---|
| bti-tracker | ≤ 1.4.4 |
blocks/shoutbox_block.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote attackers to post shoutbox entries as arbitrary users via a modified nick field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free