| Package | Affected versions | Patched versions |
|---|---|---|
| wmpro | = 5.0 |
SUNNET WMPro portal's FAQ function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to obtain sensitive information via a database.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free