| Package | Affected versions | Patched versions |
|---|---|---|
| studio onsite | < 1.0.3-0.18.1 | 1.0.3-0.18.1 |
| studio onsite appliance | < 1.1.2-0.25.1 | 1.1.2-0.25.1 |
A vulnerability in the listing of available software of SUSE Studio Onsite, SUSE Studio Onsite 1.1 Appliance allows authenticated users to execute arbitrary SQL statements via SQL injection. Affected releases are SUSE Studio Onsite: versions prior to 1.0.3-0.18.1, SUSE Studio Onsite 1.1 Appliance: versions prior to 1.1.2-0.25.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free