| Package | Affected versions | Patched versions |
|---|---|---|
| cms made simple | ≤ 2.2.15 |
SQL Injection vulnerability in CMS Made Simple through 2.2.15 allows remote attackers to execute arbitrary commands via the m1_sortby parameter to modules/News/function.admin_articlestab.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free