| Package | Affected versions | Patched versions |
|---|---|---|
| yoxel | = 1.06beta= 1.07beta= 1.08beta= 1.09beta= 1.10beta= 1.11beta= 1.12beta= 1.13beta= 1.14beta= 1.15beta= 1.16beta= 1.17beta= 1.18beta= 1.19beta= 1.20= 1.20beta= 1.21= 1.21beta= 1.22= 1.22beta≤ 1.23beta |
Multiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow remote authenticated users to execute arbitrary PHP code via the proj_id parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free