| Package | Affected versions | Patched versions |
|---|---|---|
| visual access manager | < 4.42.2 | 4.42.2 |
In Selesta Visual Access Manager < 4.42.2, an authenticated user can access the administrative page /common/vam_Sql.php, which allows for arbitrary SQL queries.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free