Description
SQL injection vulnerability in submit.php in PHP-Fusion 6.01.14 and 6.00.307, when magic_quotes_gpc is disabled and the database table prefix is known, allows remote authenticated users to execute arbitrary SQL commands via the submit_info[] parameter in a link submission action. NOTE: it was later reported that 7.00.2 is also affected.
Remediation
References
Related Vulnerabilities
WordPress Plugin Easy Contact Forms Export 'file' Parameter Information Disclosure (1.1.0)
Python Inefficient Regular Expression Complexity Vulnerability (CVE-2024-6232)
PHP Other Vulnerability (CVE-2003-0172)
WordPress Plugin Brizy-Page Builder Cross-Site Scripting (2.3.26)
Django Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2019-19844)