| Package | Affected versions | Patched versions |
|---|---|---|
| phpkb | = 9.0 |
An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free