| Package | Affected versions | Patched versions |
|---|---|---|
| e-friends | ≤ 4.21 |
SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute arbitrary SQL commands via the pack parameter in a paypal action for index.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free