Sql injection

SQL injection vulnerability in members.php in the Members CV job module 1.0 for PHP-Fusion, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the sortby parameter...

CVE-2009-0831

CVE-2009-0831 affects PHP-Fusion's Members CV (job) module 1.0. The vulnerability is an SQL injection in members.php via the sortby parameter when magic_quotes_gpc is disabled, exploitable by remote authenticated users. NVD reports a base score of 6.0 (Medium) with AV:N/AC:M/Au:S/C:P/I:P/A:P.

CVE-2009-0831

SQL injection vulnerability in members.php in the Members CV job module 1.0 for PHP-Fusion, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the sortby parameter...