Description
modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent).
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | nukeviet/nukeviet | < 4.3.04 | 4.3.04 | GHSA-q4qv-fmwc-qxpx |