CVE-2020-12461

HIGH

php-fusion 9.03.50 - SQL Injection via members.php sort_order Parameter

Title source: llm
STIX 2.1

Description

PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism. An attacker can develop a crafted payload that can be inserted into the sort_order GET parameter on the members.php members search page. This parameter allows for control over anything after the ORDER BY clause in the SQL query.

References (5)

Core 5
Core References
Exploit, Third Party Advisory x_refsource_misc
https://hackmd.io/lq7nA3ISSoeiGjiHVn5CoA
Exploit, Third Party Advisory x_refsource_misc
https://github.com/php-fusion/PHP-Fusion/issues/2308

Scores

CVSS v3 8.8
EPSS 0.0170
EPSS Percentile 74.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
php-fusion/php-fusion 9.03.50
Published Apr 29, 2020
Tracked Since Feb 18, 2026