| Package | Affected versions | Patched versions |
|---|---|---|
| ragnarok online control panel | = 4.3.4a |
functions.php in Ragnarok Online Control Panel (ROCP) 4.3.4a allows remote attackers to bypass authentication by requesting account_manage.php with a trailing "/login.php" PHP_SELF value, which is not properly handled by the CHECK_AUTH function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free