| Package | Affected versions | Patched versions |
|---|---|---|
| newspower | ≤ 4.0.1 |
Associated Press (AP) Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free