| Package | Affected versions | Patched versions |
|---|---|---|
| quick.forum | = 2.1.6 |
Quick.Forum 2.1.6 stores potentially sensitive information such as usernames, banned IP addresses, censored words, and backups under the web document root, which allows remote attackers to obtain that information via a direct request to (1) db/users.txt, (2) db/banList.txt, (3) db/censureWords.txt, or (4) backup files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free