| Package | Affected versions | Patched versions |
|---|---|---|
| pmos helpdesk | ≤ 2.4 |
form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free