| Package | Affected versions | Patched versions |
|---|---|---|
| open-realty | = 2.3.4 |
index.php in Open-Realty 2.3.4 allows remote attackers to obtain sensitive information (the full path) via an invalid listingID parameter in a listingview action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free