CVE-2014-3757 SQL injection vulnerability in sorter.php in the phpManufaktur kitForm extension 0.43 and earlier for the KeepInTouch (KIT) module allows remote attackers to execute arbitrary SQL commands via the sor...
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in sorter.php in the phpManufaktur kitForm extension 0.43 and earlier for the KeepInTouch (KIT) module allows remote attackers to execute arbitrary SQL commands via the sorter_value parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpmanufaktur kitform | <= 0.43 | No fix listed |
| phpmanufaktur kitform | = 0.10 | No fix listed |
| phpmanufaktur kitform | = 0.11 | No fix listed |
| phpmanufaktur kitform | = 0.12 | No fix listed |
| phpmanufaktur kitform | = 0.13 | No fix listed |
| phpmanufaktur kitform | = 0.14 | No fix listed |
| phpmanufaktur kitform | = 0.15 | No fix listed |
| phpmanufaktur kitform | = 0.16 | No fix listed |
| phpmanufaktur kitform | = 0.17 | No fix listed |
| phpmanufaktur kitform | = 0.18 | No fix listed |
| phpmanufaktur kitform | = 0.19 | No fix listed |
| phpmanufaktur kitform | = 0.20 | No fix listed |
| phpmanufaktur kitform | = 0.21 | No fix listed |
| phpmanufaktur kitform | = 0.22 | No fix listed |
| phpmanufaktur kitform | = 0.23 | No fix listed |
| phpmanufaktur kitform | = 0.24 | No fix listed |
| phpmanufaktur kitform | = 0.25 | No fix listed |
| phpmanufaktur kitform | = 0.26 | No fix listed |
| phpmanufaktur kitform | = 0.27 | No fix listed |
| phpmanufaktur kitform | = 0.28 | No fix listed |
| phpmanufaktur kitform | = 0.29 | No fix listed |
| phpmanufaktur kitform | = 0.30 | No fix listed |
| phpmanufaktur kitform | = 0.31 | No fix listed |
| phpmanufaktur kitform | = 0.32 | No fix listed |
| phpmanufaktur kitform | = 0.33 | No fix listed |
Show 9 more
| Product | Affected versions | Fixed in |
|---|---|---|
| phpmanufaktur kitform | = 0.34 | No fix listed |
| phpmanufaktur kitform | = 0.35 | No fix listed |
| phpmanufaktur kitform | = 0.36 | No fix listed |
| phpmanufaktur kitform | = 0.37 | No fix listed |
| phpmanufaktur kitform | = 0.38 | No fix listed |
| phpmanufaktur kitform | = 0.39 | No fix listed |
| phpmanufaktur kitform | = 0.40 | No fix listed |
| phpmanufaktur kitform | = 0.41 | No fix listed |
| phpmanufaktur kitform | = 0.42 | No fix listed |
References
- 20140420 phpManufaktur / kitForm Unauthenticated SQL Injection Vulnerability exploit mailing-list
- 67000 exploit vdb-entry