Description

PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism. An attacker can develop a crafted payload that can be inserted into the sort_order GET parameter on the members.php members search page. This parameter allows for control over anything after the ORDER BY clause in the SQL query.

Remediation

References

CVE-2020-12461

Related Vulnerabilities

Moodle Exposure of Resource to Wrong Sphere Vulnerability (CVE-2022-40316)

TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5751)

Drupal 7PK - Security Features Vulnerability (CVE-2016-3163)

WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Scripting (1.9.1)

WordPress Plugin IMPress for IDX Broker Multiple Vulnerabilities (2.6.1)

Severity

High

Classification

CVE-2020-12461 CWE-138 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Missing Update Known Vulnerabilities