NVD Vulnerability Detail

CVE-2020-12461

Summary	PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism. An attacker can develop a crafted payload that can be inserted into the sort_order GET parameter on the members.php members search page. This parameter allows for control over anything after the ORDER BY clause in the SQL query.
Publication Date	April 30, 2020, 2:15 a.m.
Registration Date	Jan. 26, 2021, 11:51 a.m.
Last Update	Nov. 21, 2024, 1:59 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:php-fusion:php-fusion:9.03.50:::::::*

Related information, measures and tools

No	URL	タグ
1	https://github.com/php-fusion/PHP-Fusion/commit/79fe5ec1d5c75e017a6f42127741b9543658f822	Patch Third Party Advisory
2	https://github.com/php-fusion/PHP-Fusion/commit/858e43d7b0ea1897f76d5bcb3a1aed438132c0e2	Patch Third Party Advisory
3	https://github.com/php-fusion/PHP-Fusion/commit/d95cd4a2d22487723266c898b98e6be10754e03d	Patch Third Party Advisory
4	https://github.com/php-fusion/PHP-Fusion/issues/2308	Exploit Third Party Advisory
5	https://hackmd.io/lq7nA3ISSoeiGjiHVn5CoA	Exploit Third Party Advisory
6	https://github.com/php-fusion/PHP-Fusion/commit/79fe5ec1d5c75e017a6f42127741b9543658f822	Patch Third Party Advisory
7	https://hackmd.io/lq7nA3ISSoeiGjiHVn5CoA	Exploit Third Party Advisory
8	https://github.com/php-fusion/PHP-Fusion/issues/2308	Exploit Third Party Advisory
9	https://github.com/php-fusion/PHP-Fusion/commit/d95cd4a2d22487723266c898b98e6be10754e03d	Patch Third Party Advisory
10	https://github.com/php-fusion/PHP-Fusion/commit/858e43d7b0ea1897f76d5bcb3a1aed438132c0e2	Patch Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-89	SQLインジェクション	https://cwe.mitre.org/data/definitions/89.html

JVN Vulnerability Information

PHP-Fusion における SQL インジェクションの脆弱性

Title	PHP-Fusion における SQL インジェクションの脆弱性
Summary	PHP-Fusion には、SQL インジェクションの脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	April 29, 2020, midnight
Registration Date	May 29, 2020, 6:14 p.m.
Last Update	May 29, 2020, 6:14 p.m.

Affected System

PHP-Fusion

PHP-Fusion 9.03.50

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2020-12461	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12461
National Vulnerability Database (NVD)
2	CVE-2020-12461	https://nvd.nist.gov/vuln/detail/CVE-2020-12461

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-89	https://jvndb.jvn.jp/ja/cwe/CWE-89.html

ベンダー情報

No	Name	URL
GitHub
1	2308 - Solution (clean up) (79fe5ec)	https://github.com/php-fusion/PHP-Fusion/commit/79fe5ec1d5c75e017a6f42127741b9543658f822
2	2308 - Solution (clean up) (d95cd4a)	https://github.com/php-fusion/PHP-Fusion/commit/d95cd4a2d22487723266c898b98e6be10754e03d
3	2308 - Solution (Small fixes)	https://github.com/php-fusion/PHP-Fusion/commit/858e43d7b0ea1897f76d5bcb3a1aed438132c0e2
4	Authenticated SQL Injection Exists in any page that allows control over the sort order. #2308	https://github.com/php-fusion/PHP-Fusion/issues/2308

Change Log

No	Changed Details	Date of change
1	[2020年05月29日] 掲載	May 29, 2020, 6:14 p.m.