CVE-2011-0512 SQL injection vulnerability in team.php in the Teams Structure module 3.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the team_id parameter.
MediumCVSS 6.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in team.php in the Teams Structure module 3.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the team_id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jikaka teams structure module | = 3.0 | No fix listed |
References
- 70451 vdb-entry
- 42943 third-party-advisory vendor-advisory
- 16004 exploit
- 45826 vdb-entry
- phpfusion-team-structure-sql-injection(64727) vdb-entry