Critical: Moderately critical
Impact: Manipulation of data
Where: Remote
Solution Status: Vendor Patch
Some vulnerabilities have been reported in glFusion, which can be exploited by malicious people to conduct SQL injection attacks.
Input passed via the “order” and “direction” parameters to private/system/classes/listfactory.class.php is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.
The vulnerabilities are reported in version 1.1.2 and prior.
Apply patch.
http://www.glfusion.org/listfactory.class.zip
http://www.glfusion.org/article.php/security_20090329
This vulnerability has been fixed in glFusion v1.1.3 and later
Nine:Situations:Group
No CVE references