| Package | Affected versions | Patched versions |
|---|---|---|
| easyvista | ≤ 2010 |
The single sign-on (SSO) implementation in EasyVista before 2010.1.1.89 allows remote attackers to bypass authentication via a modified url_account parameter, in conjunction with a valid login name in the SSPI_HEADER parameter, to index.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free