| Package | Affected versions | Patched versions |
|---|---|---|
| codeavalanche news | = 1.2 |
SQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to execute arbitrary SQL commands via the password field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free