| Package | Affected versions | Patched versions |
|---|---|---|
| security center | ≥ 6.6.0, ≤ 6.8.0 |
Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL queries without proper escaping or parameterized queries, enabling blind SQL injection and unauthorized database read access.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free