| Package | Affected versions | Patched versions |
|---|---|---|
| visual access manager | < 4.42.2 | 4.42.2 |
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /common/ajaxfunction.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free