| Package | Affected versions | Patched versions |
|---|---|---|
| bannermatic | = 1.0= 2.0= 3.0 |
Bannermatic 1, 2, and 3 stores the (1) ban.log, (2) ban.bak, (3) ban.dat and (4) banmat.pwd data files under the web document root with insufficient access control, which allows attackers to obtain sensitive information via a direct request for the files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free