| Package | Affected versions | Patched versions |
|---|---|---|
| webstore 400 | = 4.14 | |
| webstore 400cs | = 4.14 |
WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by (1) inserting a null character or (2) .. (dot dot).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free