| Package | Affected versions | Patched versions |
|---|---|---|
| candypress store | = 3.5.2.14 |
Multiple SQL injection vulnerabilities in CandyPress Store 3.5.2.14 allow remote attackers to execute arbitrary SQL commands via the (1) policy parameter in openPolicy.asp or the (2) brand parameter in prodList.asp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free