webSPELL 4.2.4 Cross Site Request Forgery / SQL Injection

webSPELL version 4.2.4 suffers from cross site request forgery and remote SQL injection vulnerabilities.

Leave a Reply