| Package | Affected versions | Patched versions |
|---|---|---|
| hubstaff | = 1.6.13= 1.6.14 |
Hubstaff 1.6.13 and 1.6.14 contain a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library. Attackers can generate a custom DLL using Metasploit and place it in the system32 directory to obtain a reverse shell during application startup.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free