Description
PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of product_detail.php that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the 'id' parameter to potentially extract or modify database information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AllHandsMarketing | PhpIX 2012 Professional | 2012 | — |
References
- ExploitDB-48138 exploit
- Vendor Homepage product
- Demonstration Website technical-description
- VulnCheck Advisory: PhpIX 2012 Professional - 'id' SQL Injection third-party-advisory