| Package | Affected versions | Patched versions |
|---|---|---|
| active price comparison | = 4.0 |
Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the (1) ProductID parameter to reviews.aspx or the (2) linkid parameter to links.asp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free