| Package | Affected versions | Patched versions |
|---|---|---|
| moneyprinterturbo | ≤ 1.2.6 | |
| moneyprinterturbo | = 1.2.6 |
wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free