Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2020-37108

PhpIX 2012 Professional - 'id' SQL Injection

Description

PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of product_detail.php that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the 'id' parameter to potentially extract or modify database information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AllHandsMarketing PhpIX 2012 Professional

  • 2012affected

References