| Package | Affected versions | Patched versions |
|---|---|---|
| live support | = 1.21 |
AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to obtain administrative access via a direct request to admin/managesettings.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free