Description

Multiple SQL injection vulnerabilities in PHP-Fusion 7.02.07 allow remote authenticated users to execute arbitrary SQL commands via the (1) submit_id parameter in a 2 action to files/administration/submissions.php or (2) status parameter to files/administration/members.php.

Remediation

References

CVE-2014-8596

Related Vulnerabilities

WordPress Plugin Watu Quiz Cross-Site Scripting (3.3.8.1)

WordPress Plugin Find My Blocks Information Disclosure (3.3.2)

MySQL CVE-2016-0605 Vulnerability (CVE-2016-0605)

Joomla Other Vulnerability (CVE-2007-4184)

WordPress Plugin Booked-Appointment Booking for WordPress Security Bypass (2.2.5)

Severity

High

Classification

CVE-2014-8596

Tags

Missing Update Known Vulnerabilities