SQL injection vulnerability in sorter.php in the phpManufaktur kitForm extension 0.43 and earlier for the KeepInTouch (KIT) module allows remote attackers to execute arbitrary SQL commands via the sorter_value parameter.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-89,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| phpmanufaktur | kitform | 0.15 |
| phpmanufaktur | kitform | 0.33 |
| phpmanufaktur | kitform | 0.26 |
| phpmanufaktur | kitform | 0.19 |
| phpmanufaktur | kitform | 0.35 |
| phpmanufaktur | kitform | 0.20 |
| phpmanufaktur | kitform | 0.41 |
| phpmanufaktur | kitform | 0.22 |
| phpmanufaktur | kitform | 0.23 |
| phpmanufaktur | kitform | 0.21 |
| phpmanufaktur | kitform | 0.28 |
| phpmanufaktur | kitform | 0.32 |
| phpmanufaktur | kitform | 0.13 |
| phpmanufaktur | kitform | 0.16 |
| phpmanufaktur | kitform | 0.31 |
| phpmanufaktur | kitform | 0.11 |
| phpmanufaktur | kitform | 0.24 |
| phpmanufaktur | kitform | 0.38 |
| phpmanufaktur | kitform | 0.12 |
| phpmanufaktur | kitform | 0.14 |
| phpmanufaktur | kitform | 0.30 |
| phpmanufaktur | kitform | 0.10 |
| phpmanufaktur | kitform | 0.37 |
| phpmanufaktur | kitform | 0.17 |
| phpmanufaktur | kitform | 0.42 |
| phpmanufaktur | kitform | 0.39 |
| phpmanufaktur | kitform | 0.40 |
| phpmanufaktur | kitform | 0.25 |
| phpmanufaktur | kitform | 0.36 |
| phpmanufaktur | kitform | * |
| phpmanufaktur | kitform | 0.18 |
| phpmanufaktur | kitform | 0.27 |
| phpmanufaktur | kitform | 0.29 |
| phpmanufaktur | kitform | 0.34 |