| Package | Affected versions | Patched versions |
|---|---|---|
| mercuryboard | = 1.0= 1.1= 1.1.1= 1.1.2≤ 1.1.5 |
SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header ($_SERVER['HTTP_USER_AGENT']).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free