| Package | Affected versions | Patched versions |
|---|---|---|
| orangescrum | = 1.8.0 |
Orangescrum 1.8.0 contains an authenticated SQL injection vulnerability that allows authorized users to manipulate database queries through multiple vulnerable parameters. Attackers can inject malicious SQL code into parameters like old_project_id, project_id, uuid, and uniqid to potentially extract or modify database information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free