high7.5Public exploit code
CVE-2013-5121
SQL injection vulnerability in PHPFox before 3.6.0 (build6) allows remote attackers to execute arbitrary SQL commands via the search[sort_by] parameter to user…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHPFox 3.6.0 (build3) - Multiple SQL Injections2013-08-08 · webapps · php
Impact
SQL injection vulnerability in PHPFox before 3.6.0 (build6) allows remote attackers to execute arbitrary SQL commands via the search[sort_by] parameter to user/browse/view_/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpfox | Phpfox | Version 3.6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2013-08/0048.html
- http://osvdb.org/96028
- http://www.exploit-db.com/exploits/27430
- http://www.securityfocus.com/bid/61660
- http://archives.neohapsis.com/archives/bugtraq/2013-08/0048.html
- http://osvdb.org/96028
- http://www.exploit-db.com/exploits/27430
- http://www.securityfocus.com/bid/61660