PT-2014-8643

Name of the Vulnerable Software and Affected Versions PHP-Fusion version 7.02.07 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the submit id parameter in a 2 action to "files/administration/submissions.php" or the status...