Vulnerability in MARS (Multi-Application Recovery Service)

Summary

An SQL injection vulnerability has been reported to affect MARS (Multi-Application Recovery Service). If exploited, a remote attacker can execute unauthorized code or commands.

We have already fixed the vulnerability in the following version:

Note: Starting from version 1.3.x, the application has been renamed to HDP for Wordpress (MARS).

Recommendation

To fix the vulnerability, we recommend updating MARS (Multi-Application Recovery Service) to the latest version.

Updating MARS (Multi-Application Recovery Service)

1. Log on to QTS or QuTS hero as an administrator.
2. Open App Center and then click .
   A search box appears.
3. Type "MARS" and then press ENTER.
   The application appears in the search results.
4. Click Update.
   A confirmation message appears.
   Note: The Update button is not available if your application is already up to date.
5. Click OK.
   The system updates the application.