| Package | Affected versions | Patched versions |
|---|---|---|
| eg manager | = 7.1.2 |
eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet (aka the Forgot Password feature).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free