| Package | Affected versions | Patched versions |
|---|---|---|
| tiny tiny rss | = 17.4 |
A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free