CVE-2020-37108 — PhpIX 2012 Professional - 'id' SQL Injection
PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of product_detail.php that allows remote attackers to manipulate database queries. Attackers…
Published: 2026-02-03 · CVSS: 7.1 · CVSS 4.0
PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of product_detail.php that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the 'id' parameter to potentially extract or modify database information.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7