tocsin

Debian/php-letodms-core: critical 9.8

SQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Action: Upgrade php-letodms-core to 3.3.8-1 or later.

Affected

introducedfixedlast affected
03.3.8-1-

Fixed versions

3.3.8-1

Sources

published · modified · JSON