medium6.0Public exploit code
CVE-2009-0831
SQL injection vulnerability in members.php in the Members CV (job) module 1.0 for PHP-Fusion, when magic_quotes_gpc is disabled, allows remote authenticated us…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Fusion Mod Members CV (job) 1.0 - SQL Injection2009-01-07 · webapps · php · Verified
Impact
SQL injection vulnerability in members.php in the Members CV (job) module 1.0 for PHP-Fusion, when magic_quotes_gpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the sortby parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php-Fusion | Members Cv Module | Version 1.0 |