CVE-2013-5120: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PHPFox before 3.6.0 build4 allows remote attackers to execute arbitrary SQL commands via the searchgender parameter to user/browse/view/...

PT-2013-5370

Name of the Vulnerable Software and Affected Versions PHPFox versions prior to 3.6.0 build4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the searchgender parameter to the "/user/browse/view /" API endpoint. Recommendations For versions prio...