| Package | Affected versions | Patched versions |
|---|---|---|
| cwguestbook | ≤ 2.1 |
SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro (aka MD-Pro) allows remote attackers to execute arbitrary SQL commands via the rid parameter in a viewrecords action to modules.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free