Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter in details.php or the (2) query parameter in search.php.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Olatedownload | Olate | 3.4.0 (including) | 3.4.0 (including) |